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EXECUTIVE SUMMARY 
General 


GOGC has carried out FEED studies for the new Qasr facilities, including a Safety 
Integrity Level (SIL) assessment study to establish the SIL required for each of the 
54 Instrumented Protective Functions (IPFs). The study was an extension of the 
preceding HAZID study (Ref. 1) and HAZOP study (Ref. 2). The P&lDs and the 
Cause & Effects diagrams were used as the primary / master documents for the SIL 
Assessment. Each IPF was reviewed by considering the potential safety, 
environmental and financial risk using the risk graph approach in accordance with 
IEC 61511. 


The aim of this report is to document the findings of the SIL workshop. Achievement 
of the SIL targets established in this report will need to be demonstrated during 
detailed design once the systems have been more fully defined. 


This review should be considered preliminary as it has been performed at the FEED 
stage of the project and there may be changes as the design is developed and 
refined during detail engineering. The findings of this FEED review, and the 
assumptions that are summarised in Table 3-4 should be revisited and reviewed 
during detail engineering. 


Main Findings 


A total of 54 IPFs were identified as part of the SIL assessment. The breakdown of 
classifications is shown in Table 1.0. 


Table 0-1.0: Summary of SIL Classifications 


Classification No. of IPFs | Comments 

SIL 4 0 None 

SIL 3 0 None 

SIL 2 13 The majority are financial, arising from failure of one or 
more compressors, or the HP fuel gas supply on which 
they depend. 

SIL 1 19 The majority of these are also financial. 

SIL 0 (or unclassified) 22 These are IPFs which are conventionally expected in a 
HAZOP, but which do not provide a substantial reduction 
in risk. 

Total IPFs Reviewed 54 


A listing of IPFs in each classification, along with the consequence category driving 
the overall classification, is given in Tables 4-2 to 4-5. 


Recommendations 
One recommendation was made during the SIL assessment: 


1. Consider providing separate initiators on duties where the same instrument 
provides input into two distinct outputs under two distinct initiating conditions; 


2. Any SIL 2 or higher shall be confirmed during detailed design using a more 
quantitative approach, e.g. Fault Tree Analysis; 
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3. Changes to the design basis shall require re-assessment 


4. EPC contractor shall verify IPF (30-LIT-344 HH) on the existing HP Flare KO 
Drum to confirm SIL 2 classification 


Genesis Oil & Gas Consultants Ltd Page 7 of 84 Date: Nov 2011 
File name: J08509A-F-RT-20055 Rev D2 SIL Assessment Report Rev: D2 


SIL Assessment Report ki 


GENESIS 
Ee] 


Qasr Compression Project FEED 


1 INTRODUCTION 


1.1 Project Background 


Qasr is a large, normally pressured gas-condensate reservoir located in the Western 
Desert of Egypt approximately 525 km west of Cairo. The field is operated by Khalda 
Petroleum Company (KPC), a joint venture between Apache Corporation and 
Egyptian General Petroleum Company (EGPC). 


Figure 1-1 Qasr Development Location 


a ëm E: ewe | — = ory > (e 


BACKHANI 


Field production is initially handled at the Start of Line (SOL) Qasr Plant. After initial 
treatment (cooling and water removal) the gas/condensate is exported to a 
combination of the Salam, Tarek and Obaiyed gas plants for further treatment. 


The Qasr gas and condensate currently free flows from the wellheads through the 
Qasr Phase | and Phase II facilities and export pipelines to the SHAMS manifold and 
Salam gas plant under reservoir pressure. As the reservoir pressure declines the 
peak gas rate of 800 mmscfd will no longer be achieveable. The Qasr Compression 
Project is designed to improve recovery as the reservoir production rate and 
pressure decline. 


The Qasr Compression Project scope comprises: 


e Gas turbine driven single stage compressor sets 
e Condensate export pumps 

e Power generation 

e Utility systems 


1.2 Purpose 


This document is the report of the Safety Integrity Level (SIL) workshop for the Qasr 
Compression Project which was performed shortly after the completion of the 
HAZOP. 


A number of measures are to be used on the Qasr Compression Project facilities to 
control the process risk (safety, environmental and financial). Some of these 
measures are to be implemented using Instrumented Protective Functions (IPFs). 
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The degree of reliance on these IPFs to control the risk to a tolerable level has been 
established by categorising the Safety Integrity Level (SIL) required for each IPF. 


This assessment has been done in line with guidance provided in IEC 61511 (Refs. 
3, 4 and 5), and has used the calibrated Risk Graph approach (see Appendix A). 
This approach relies on grading a number of parameters that describe the nature of 
the incident and its potential impact on risk: 


S Conseguence severity (no. of people affected & vulnerability); 
s Personnel exposure; 

$ Alternatives to avoid danger; and 

° Environmental impact; and 

S Consequential loss of assets or revenue; and 

s Demand rate. 


The grading has been carried out without taking credit for the IPF so that the 
criticality of the IPF could be established. 


1.3 Pre-Requisites 


The study has applied the Risk Graph approach in IEC 61511 to the new Qasr 
facilities. The Risk Graph in IEC 61511 has been accepted by KPC for the risk 
control requirements. 


1.4 Review Basis 


This initial review has been performed at the FEED stage of the project. It is 
anticipated that the design will be developed and refined during detail engineering, 
and the findings will need to be revisited during detailed design. 


The master HAZOP P&IDs and ESD Cause & Effects Diagram that form the basis of 
the SIL assessment are included in Appendices B and C respectively. 
1.5 Timing and Location 


The SIL study took place on the 3rd October 2011 in GOGC's offices, High Holborn, 
London 
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1.6 Study Members 
The personnel attending the SIL review are listed in Table 1-1. 
Table 1-1: SIL Review Team Members 
Name Position 
1 Rod Bayliss SIL Chairman 
2 Chris Fossa Scribe 
KPC 
3 Ayman Saleh Project Manager 
4 Mohamed Saleh Mechanical 
5 Ibrahim Hammad Process 
6 Mohamed Ismail Control & Instrument 
7 Moataz Elsalakawy Project General Manager 
PMC 
8 Somu Janarthanan Process 
GOGC 
9 Himanshu Mohorikar Process 
10 Paul Small Control & Instrument (Part-time) 
11 Russ Jenkins Safety 
12 Daniel Palen Process 
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2 SCOPE & APPROACH 
2.1 Study Scope 


2.1.1 Inclusions 


The review has assessed all the IPFs included in the design of the Qasr 
Compression Project FEED to protect against, or to mitigate the consequences of, 
unplanned deviations from normal operating conditions that affect safety, 
environmental and financial risk from: 


e Process Elements; 
e Hazardous utilities. 


The IPFs have been identified from the ESD Cause and Effect matrices, and cross- 
checked against the HAZOP and the P&lDs. 


2.1.2 Exclusions 


Non-hazardous utilities, spurious trip integrity affecting production loss (revealed 
failures) and loops with manual initiation are not within the scope of this study. 


A number of inputs included in the ESD Cause & Effect matrices have been omitted 
from this review. These include: 


° Permissives (e.g. instruments that allow a control action to occur, or 
prevent a control action from occurring; 
è Inputs from the existing Qasr facilities; 
s Inputs from the Fire & Gas system on the new facilities; 
* Vendor packages (for which no information is shown on the P&ID); 
‘ Spurious trip integrity affecting production loss (revealed failures); 
‘ Loops with manual initiation, e.g. push buttons. 
2.2 Study Approach 


2.2.1 Overview 


This assessment is performed in line with guidance provided in IEC 61511 (Refs. 3, 4 
and 5), and has used the Risk Graph approach, as shown in Table 2-1. 
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occurring. 
RISK GRAPH TARGET: SIL target for ESD loop 


as per the above risk graph is SIL 3. 


ACTUAL TARGET: SIL target for the ESD loop taking into account the added protection provided by the PSV is 3 - 2 = SIL 1. 
SIL LEVELS: SIL 1 (PFD 0.1 — 0.01); SIL 2 (PFD 0.01 — 0.001); SIL 3 (PFD 0.001 — 0.0001); SIL 4 (PFD 0.0001 — 0.00001). 
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Table 2-1: Risk Graph 
Risk Graph 
Consequence Severity Personnel Exposure Alternatives to Avoid Danger |Demand Rate 
(if the protection fails) 
Slight Injury SI Not applicable NA Not applicable NA Hoh 0.3 - 3yrs H 
Serious Injuries or 1 Death 1D Rare (<10% oftime) R Possible P Low 3 -30 yrs L 
Multiple Deaths MD  |Frequent F Not Likely NL Mem Low 30 yrs+ VL 
Catastrophic Cc 
(>10 deaths use quantified) 
: F demand rate is lormal mode of 
related to occupancy P should only be selected if control / cause of 
Environmental E then use F all the following are true: demand 
1. The operator will know the 
Financial / Reputation F protection has failed Operator H 
EE SEE EET, 2. Independent means of 
shutting down are provided PCS L 
3. There is sufficient time for 
the operator to respond prior 
To the hazardous event 
occurring. ESD / SSDS VL 
Consequence Type 
SAFETY (S) 
High Low Very Low 
Si 0 0 
1 0 
2 0 
2 1 
3 1 
R 
MD 3 2 
F 
4 3 
C 
4 4 
Conseguence Type 
ENVIRONMENTAL (E) 
eportable Release 
Major temporary environmental 
impact (up to 3 months) MT 2 1 0 
Major longer term environmental 
impact (> 3 months) MP 3 2 1 
Consequence Type 
FINANCIAL (F) 
I< < 
=$1M<$10M MM 2 1 0 
>$10M >M 3 2 1 


Note: If wholly independent mechanical protection (e.g. PSV), or a wholly independent high integrity protection system (HIPS) specified to meet 
or exceed the requirements of SIL 3, is available and provides total protection against the scenario under consideration, the resulting SIL target 
for the protective system in question can be reduced by 2. 


SCENARIO: Overpressure protection provided by ESD loop (PT, logic solver and valve) and PSV, either one operating will prevent the hazard 


Ranacice Nil 9 Gace Canciultante l tA 
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This approach relies on grading a number of parameters that describe the nature of 
the incident and its potential impact on risk: 


$ Consequence severity (no. of people affected & vulnerability, 
environmental impact, financial loss; 

s Personnel exposure; 

s Alternatives to avoid danger; 

$ Demand rate. 


The risk graphs presented in the Terms of Reference (Ref. 6) were agreed by KPC 
for the purposes of this SIL assessment. The grading has been carried out without 
taking credit for the IPF so that the criticality of the IPF can be established. 


A pre-requisite to the SIL assessment in IEC 61511 is that all the required IPFs have 
been identified by a preceding hazard and risk analysis. For the Qasr Compression 
project, this has been achieved by a combination of past experience of designing 
such systems (as allowed by Ref. 5, Section 8.2.1), and the preceding HAZOP (Ref. 
2). 

2.2.2 Key Criteria 


Any IPF requiring SIL 4 shall not be accepted, and additional protective measures 
shall be provided. 
Any SIL required at level 2 or higher shall be confirmed during detailed design using 


a more detailed quantitative approach, e.g. Fault Tree Analysis, since the risk graph 
method is necessarily coarse in nature. 
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2.2.3 Detailed Steps 


The assessment process involves several repetitive steps for each of the IPF loops. 
These are identified in Table 2-2: 


10. 
11. 


Donne 


Table 2-2 SIL Assessment - Steps for Review of each IPF 


Identify loop (record tag and P&ID No.) 
Determine functionality of loop and potential hazard(s) being protected against 
Identify causes for demand. 
Evaluate potential consequences (without risk reduction measures) 
Determine Safety IL with Risk Graph (Figure 4-1) using the following parameters: 
e Consequence Severity (no of people exposed + vulnerability) 
e Personnel Exposure (fraction of time exposed) 
e Alternatives to avoid danger 
e Demand rate 


Determine IL for environmental loss based on E. 
Determine IL for financial loss based on F 


Required IL to be the highest of the three (S, E, F) 
Adjust IL if same risk is limited by other independent measures 
e Take the value of SIL derived in steps 1-8 


e identify independent risk reduction measures & adjust IL (PSV up to 2, F&G gas detection 
for safety=1, etc.) 


Record the results and any associated assumptions or actions. 
Repeat steps 1 to 10 for each of the IPF loops. 
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The master documents used as a starting point were the P&IDs and ESD Cause and 
Effects matrices. These are listed in Table 3-1 and Table 3-2, and are included in 
Appendices B and C. 


Any changes to the basis will require their impact to be re-assessed, and the degree 
of further assessment established. 


3.1 Documents Supplied 


Documents used as a starting point are listed in Table 3-1 and Table 3-2, as per the 
Terms of Reference (Ref. 6). 


Table 3-1 P&IDs 


Drawing Number 


Title 


J08509A-P-DW-12210 


Gas manifolds 


J08509A-P-DW-12211 


Compressor Suction Drum Train A 


J08509A-P-DW-12212 


Compressor Train A 


J08509A-P-DW-12213 


Compressor Discharge Cooler Train A 


J08509A-P-DW-12214 


Compressor Discharge Drum Train A 


J08509A-P-DW-12215 


Condensate manifolds 


J08509A-P-DW-12221 


Compressor Suction Drum Train B 


J08509A-P-DW-12222 


Compressor Train B 


J08509A-P-DW-12223 


Compressor Discharge Cooler Train B 


J08509A-P-DW-12224 


Compressor Discharge Drum Train B 


J08509A-P-DW-12250 


Condensate Suction Drum A 


J08509A-P-DW-12251 


Condensate Export Pumps A, B & C 


J08509A-P-DW-12254 


Condensate Suction Drum B 


J08509A-P-DW-12261 


Flash Gas Compressor A (Future) 


J08509A-P-DW-12262 


Flash Gas Compressor B (Future) 


J08509A-P-DW-12300 


Instrument Air Generation 


J08509A-P-DW-12301 


Inert Gas Generation 


J08509A-P-DW-12302 


HP Fuel Gas (Flash Gas) Feed 


J08509A-P-DW-12303 


HP Fuel Gas (Process Gas) Feed 


J08509A-P-DW-12304 


Start Up HP Fuel Gas 


J08509A-P-DW-12305 


HP Fuel Gas KO Drum 


J08509A-P-DW-12306 


Ak 


Mercury Removal Unit (MRU) 


J08509A-P-DW-12307 


HP Fuel Gas System 


Genesis Oil & Gas Consultants Ltd 


Page 15 of 84 


File name: J08509A-F-RT-20055 Rev D2 SIL Assessment Report 


Nov 2011 


SIL Assessment Report Re 


GENESIS 
Qasr Compression Project FEED —" 


Drawing Number 


Title 


J08509A-P-DW-12308 


LP Fuel Gas System 


J08509A-P-DW-12309 


HP Flare Collection 


J08509A-P-DW-12310 


LP Sources to Cold Vent Collection 


J08509A-P-DW-12311 


Closed Drains 


J08509A-P-DW-12314 


Closed Drain Transfer Pumps A & B 


J08509A-P-DW-12315 


Instrument Air Receiver and Distribution 


* 


J08509A-P-DW-12316 * 


Inert Gas Distribution, Compression and Receiver 


J08509A-P-DW-12353 


Process Tie-In New Gas and Condensate Systems 


J08509A-P-DW-12354 


Process Tie-In Black-start Fuel Gas System 


J08509A-P-DW-12355 


Process Tie-In Fuel Gas to Phase | & Phase I] Consumers 


J08509A-P-DW-12356 


Process Tie-In HP Flare 


J08509A-P-DW-12357 


Process Tie-In Cold Vent System 


J08509A-P-DW-12358 


Process Tie-In Methanol 


J08509A-P-DW-12359 


Process Tie-In Train Il Separator QA-V-3002A Inlet Throttle Valve 


J08509A-P-DW-12360 


Process Tie-In Train Il Separator QA-V-3002B Inlet Throttle Valve 


J08509A-P-DW-12361 


Process Tie-In Train Il Separator QA-V-3002C Inlet Throttle Valve 


J08509A-P-DW-12362 


Process Tie-In Train Il Separator QA-V-4002A Inlet Throttle Valve 


J08509A-P-DW-12363 


Process Tie-In Train Il Separator QA-V-4002B Inlet Throttle Valve 


J08509A-P-DW-12364 


Process Tie-In Instrument Air Phase | 


J08509A-P-DW-12365 


Process Tie-In Instrument Air Phase II 


J08509A-P-DW-12366 


Process Tie-In Produced Water Phase II 


J08509A-P-DW-12367 


Process Tie-In Produced Water Phase | 


J08509A-P-DW-12368 


Process Tie-In SHAMS Start-Up Fuel Gas 


** Drawing was not assessed 


Table 3-2 Cause & Effects Diagrams 


Drawing Number Title 
JO8509A P-DW-12400 ESD Cause & Effects 
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3.2 Study Breakdown 
The 54 IPFs identified and reviewed in the study are listed in Table 3-3. 
Table 3-3: Study Breakdown - IPFs Examined 
W/S |Inst. Tag System Role of IPF P&ID 
No 
1 | 80-LIT-101 LL Process Gas To protect the condensate suction drum from 12211 
Compression overpressure from compressor suction drum and 
avoid PSV lifting. 
2 | 80-LIT-101 HH Process Gas Prevent liquid carry-over from compressor suction 12211 
Compression drum into gas compressor. 
3 | 80-PIT-110 LL Process Gas To protect the compressor from low suction 12212 
Compression pressure and prevent flow to export manifold 
4 | 80-PIT-111 HH Process Gas To trip the compressor and discharge cooler on 12212 
Compression high discharge pressure and prevent flow to export 
manifold 
5 | 80-TIT-102 HH Process Gas To trip the compressor and discharge cooler on 12212 
Compression high discharge temperature and prevent flow to 
export manifold 
6 | 80-VIT-101 HH Process Gas To trip the compressor and discharge cooler at high |12212 
Compression compressor vibration and prevent flow to export 
manifold 
7 | 80-TIT-110 HH Process Gas To trip the compressor and discharge cooler at high |12212 
Compression compressor bearing temperature and prevent flow 
to export manifold 
8 | 80-TIT-108 LL Process Gas To trip compressor discharge cooler fan at low 12213 
Compression discharge temperature. To autoset the cooler fan 
following increase in temperature above set point. 
9 | 80-TIT-108 HH Process Gas To trip compressor and discharge cooler at high 12213 
Compression discharge temperature and prevent flow to export 
manifold 
10 | 80-LIT-104 LL Process Gas To protect the condensate separator from 12214 
Compression overpressure from compressor discharge drum and 
avoid PSV lifting. 
11 | 80-LIT-104 HH Process Gas Prevent liquid carry over into the second stage 12214 
Compression compression system and gas export manifold 
12 | 80-LIT-002A LL | Condensate To prevent export pump damage. 12250 
Drums and 
Pumps 
13 | 80-LIT-002A HH | Condensate Prevent condensate carryover into the fuel gas 12250 
Drums and system and flash gas compressor (future). 
Pumps 
14 | 80-PT-002A HH | Condensate To prevent overpressure of the condensate suction | 12250 
Drums and drums. 
Pumps 
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W/S |Inst. Tag System Role of IPF P&ID 
No 
15 | 80-LIT-021A LL | Condensate To prevent condensate export to the produced 12250 
Drums and water treatment package and ultimately gas blow- 
Pumps by. 
16 | 80-PI-XXX HH Condensate To protect the discharge piping of the condensate 12250 
A/B/C Drums and transfer pump against over pressure. 
Pumps 
17 | 80-PIT-010A LL, | Condensate Protect the pumps against low suction pressure. 12251 
80-PIT-010B LL, | Drums and Note: These were changed by the HAZOP to 
80-PIT-010C LL | Pumps high vibration or low flow trips - A high 
vibration alarm and a high-high vibration trip 
will be provided for each of the pumps. 
18 | 80-LIT-002B HH | Condensate Prevent further condensate flow to the condensate |12254 
Drums and suction drum and condensate carry over into the 
Pumps fuel gas system. 
19 | 80-PT-002B HH | Condensate To prevent overpressure of the condensate 12254 
Drums and separator 
Pumps 
20 | 80-LIT-021B LL | Condensate To prevent condensate export to the produced 12254 
Drums and water treatment package and ultimately gas blow- 
Pumps by 
21 | 80-PI-070A LL Flash Gas To protect the flash gas compressor from low 12261 
Compression suction pressure. 
22 | 80-PIT-021A HH | Flash Gas To trip the flash compressor and protect the 12261 
Compression discharge piping from over pressure 
23 | 80-TIT-004A HH | Flash Gas To trip the compressor and to protect discharge 12261 
Compression piping from high temperature. 
24 | 80-VIT-001A- Flash Gas To trip the compressor at high compressor vibration | 12261 
HH Compression and prevent damage to the compressor 
25 | 80-TIT-002A HH | Flash Gas To trip the compressor at high compressor bearing |12261 
Compression temperature and prevent damage to the 
compressor. 
26 | 80-PIT-070B LL | Flash Gas To protect the flash gas compressor from low 12262 
Compression suction pressure. 
27 | 80-PIT-021B HH | Flash Gas To trip the flash compressor and protect the 12262 
Compression discharge piping from over pressure 
28 | 80-TIT-004B HH | Flash Gas To trip the compressor and to protect discharge 12262 
Compression piping from high temperature. 
29 | 80-VIT-001B HH | Flash Gas To trip the compressor at high compressor vibration | 12262 
Compression and prevent damage to the compressor 
30 | 80-TIT-002B HH | Flash Gas To trip the compressor at high compressor bearing |12262 
Compression temperature and prevent damage to the 
compressor. 
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31 | 80-PIT-062 HH Flash Gas To protect the flash gas compression system from |12262 
Compression potential over pressurisation due to reverse flow 
from process gas compressors suction. 
32 | 80-PIT-075LL | Air and Nitrogen | To isolate the plant air supply in order to maintain 12300 
1 Systems the instrument air supply as long as possible 
33 | 80-PIT-075LL | Air and Nitrogen | To isolate the nitrogen generator air supply in order |12300 
2 Systems to maintain the instrument air supply as long as 
possible 
34 | 50-PIT-079 Air and Nitrogen | To allow controlled shut down of the plant whilst 12315 
A/B/C LL Systems there is still sufficient inventory of instrument air to 
allow this to occur. 
35 | 80-PIT-085 LL Air and Nitrogen | To isolate non-essential users to protect supply to 12316 
Systems essential users (compressors) 
36 | 80-LIT-005 LL Fuel Gas Prevent gas blow by from HP Fuel Gas KO drum to |12305 
System the closed drains drum. 
37 | 80-LIT-005 HH Fuel Gas To prevent liquid carry over into the Mercury 12305 
System Removal Unit and downstream equipment. 
38 | 80-PIT-004 HH Fuel Gas To prevent overpressure of HP fuel gas system 12305 
System 
39 | 80-PIT-004 LL Fuel Gas To trip the compressors and power generators at 12305 
System low fuel gas pressure. 
40 | 80-TIT-007 HH Fuel Gas Prevent over heating of flash gas to HP fuel gas 12302 
System feed. 
41 | 80-TIT-005 HH Fuel Gas To protect the heater elements from over heating. 12302 
System 
42 | 80-FI-XXX LL Fuel Gas Prevent over heating of flash gas to HP fuel gas 12302 
System feed. 
43 | 80-TIT-011 HH Fuel Gas To protect the piping downstream of the HP fuel 12303 
System gas preheater and the HP fuel gas KO drum from 
over heating 
44 | 80-TIT-009 HH Fuel Gas To protect the heater elements from over heating. 12303 
System 
45 | 80-TIT-022A Fuel Gas To trip the HP fuel gas heater and protect the HP 12307 
HH, 08-TIT- System and LP fuel gas systems from excessively high 
022B HH temperatures 
46 | 80-TIT-019A HH | Fuel Gas To cut the power supply in the event of thermal 12307 
80-TIT-019B HH | System overload to the heater. 
47 | 80-TDI-XXXLL | Fuel Gas To protect the gas turbines from non superheated 12302 
System gas 
48 | 80-LIT-008 LL Fuel Gas Prevent gas blow by from LP Fuel Gas KO drum to |12308 
System the closed drains drum 
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49 | 80-PIT-053 LL Fuel Gas To open the back-up fuel gas supply to essential 12308 
System users (flare pilots and purges) if the LP fuel gas 
supply is lost in case ESD (1&2) activation. 
50 | 80-PIT-053 HH Fuel Gas To protect the LP fuel gas knock out drum. 12308 
System 
51 | 80-LIT-008 HH Fuel Gas To prevent liquid carry into the LP fuel gas 12308 
System distribution system. 
52 | 65-LIT-002 LL Closed Drain Protect closed drains drum pump 12250 
System 
53 | 65-LIT-002 HH Closed Drain To prevent the closed drains drum overflowing into | 12250 
System the cold vent and not to allow the plant to operate 
when the closed drain drum is full 
54 | 30-LIT-344 HH Flare To shut the plant down if the is high level in the flare | 12356 
KO drum. 


33 Assumptions & Assurances 


It will be necessary to verify the validity of the recorded assumptions to ensure that 
the study findings remain valid; this will be tracked in full by the Safety Action 


Management System (SAMS). 


Any changes to the assumptions will need to be 


reviewed by KPC to assess their significance and the requirement for any follow-up 
reviews. 


The assumptions made in this review are based on some specific aspects of the 
current design of the new facilities. The hierarchy of the ESD system is relevant in 
terms of assessing the financial consequences of lost production. The hierarchy is as 
follows: 


Level 1 Emergency Shutdown: 


Full plant shutdown of process and utility units. 
Automatic depressuring. 
Level 2 Emergency Shutdown: 


Full plant shutdown of process and utility units. 
No automatic depressuring. 


Clearly recovery after a Level 2 ESD will be quicker than after a Level 1 ESD as the 
facilities are not depressured. 
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Table 3-4: List of Assumptions 

W/S Assumption Verification 

No. by 

1 The cost of 1 day of lost production is approximately US$ 2.6 million (MM), 1 | KPC 
12-hour shift of lost production is also more than US$ 1 million (MM), a 
brief interruption of a few hours, is <MM, but any extended shutdown is 
greater than US$ 10 million (>MM). 

2 During parallel operation of compressors, loss of 1 compressor will not | KPC 
cause loss of production as there is a spare compressor. BUT during series 
operation of compressors, loss of any single compressor will halve the 
production rate (<MM for 1 shift, MM for more than 1 shift) 

3 The cost of replacing an export pipeline (e.g. as the result of corrosion) is | KPC 
>M 

4 An event that damages both condensate export pumps will reduce | GOGC 
production by 50% as there is only one 50% spare 

5 Interruption of the HP fuel gas supply will trip the compressors and require 1 | GOGC 
shift to recover. Loss of containment as a result of the failure will lead to an 
extended shutdown (>MM) 

6 A Level 2 ESD will require at least 1 shift to recover (MM) GOGC 

7 The difference between a controlled Level 2 ESD on loss of instrument air, | GOGC 
and an uncontrolled shutdown is an increase of material lost to flare 
because BDVs may open before isolatable sections are shut-in. 

8 Loss of the nitrogen supply (after the buffer vessel capacity is exhausted) | GOGC 
will lead to damage to the compressor seals, and loss of containment. 

9 Liquid carryover into the LP fuel gas system will extinguish the pilots | GOGC 
requiring at least 1 shift to recover 

10 Liquid carryover into the MRU will cause some ongoing loss of production to | GOGC 
bypass the MRU and clean filters, as well as the cost of replacement of 
adsorbent (MM) 

11 Liquid carryover into the cold vent system will require 1 shift to clear GOGC 

12 Liquid carryover from the flare drum may lead to loss of containment within | GOGC 
the process area requiring extended downtime to recover. 

13 The Closed Drains drum will only be used intermittently, most frequently | GOGC 
during preparation for a plant shutdown 

14 High level protection for the Closed Drains Drum will not isolate the majority | GOGC 
of operations that transfer liquid into the Closed Drains Drum, since they are 
manually controlled. 

15 Each compressor will have a CCC control system, or its equivalent, which is | GOGC 
highly reliable. 

16 The Closed drains Drum is vented to the Cold Vent via a 6” line, which is | GOGC 
sufficient to prevent overpressure from all reasonably foreseeable events, 
including gas blow-by. 
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A total of 54 IPFs were reviewed during the SIL assessment. The results are 
summarised in Table 4-1. 


Table 4-1: Summary of SIL Classifications 


Classification No. of IPFs | Comments 

SIL 4 0 None 

SIL 3 0 None 

SIL 2 13 The majority are financial, arising from failure of one or 
more compressors, or the HP fuel gas supply on which 
they depend. 

SIL 1 19 The majority of these are also financial. 

SIL 0 (or unclassified) 22 These are IPFs which are conventionally expected in a 
HAZOP, but which do not provide a substantial reduction 
in risk. 

Requiring further 0 None identified 

assessment 

Total IPFs Reviewed 54 


A listing of IPFs in each classification, along with the consequence category driving 
the overall classification (S, E, F), is given in Table 4-2 to Table 4-5. The SIL 
classifications represent the target integrity required for the respective IPFs. These 
targets will need to be demonstrated as the systems are designed in future stages of 
the project. 


There were no IPFs that could not be classified at the FEED stage due to insufficient 
information. 


4.2 


IPFs Classified SIL 2 


Table 4-2 contains the list of the 13 IPFs categorised SIL 2. 
Table 4-2: IPFs with Classification SIL 2 


W/S |Inst. Tag System Role of IPF Driving 
No Risk 
S IF (Us 
2 |80-LIT-101 HH Process Gas | Prevent liguid carry-over from compressor suction Y 
Compression | drum into gas compressor. 
5 |80-TIT-102 HH Process Gas | To trip the compressor and discharge cooler on v 
Compression | high discharge temperature and prevent flow to 
export manifold 
6 |80-VIT-101 HH Process Gas | To trip the compressor and discharge cooler at Y 
Compression | high compressor vibration and prevent flow to 
export manifold 
7 |80-TIT-110 HH Process Gas | To trip the compressor and discharge cooler at Y 


Compression 


high compressor bearing temperature and 
prevent flow to export manifold 
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W/S |Inst. Tag System Role of IPF Driving 
No Risk 
S [iF Le 
9 |80-TIT-108 HH Process Gas | To trip the compressor and discharge cooler at Y 
Compression | high compressor vibration and prevent flow to 
export manifold 
11 |BO-LIT-104 HH Process Gas | Prevent liquid carry over into the second stage v 
Compression | compression system and gas export manifold 
31 |80-PIT-062 HH Flash Gas To protect the flash gas compression system from | vw 
Compression | potential over pressurisation due to reverse flow 
from process gas compressors suction. 
43 |80-TIT-011 HH Fuel Gas To protect the piping downstream of the HP fuel Viv 
System gas preheater and the HP fuel gas KO drum from 
over heating 
aa |80-TIT-009 HH Fuel Gas To protect the heater elements from over heating. | v | v 
System 
45 |80-TIT-O22A HH | Fuel Gas To trip the HP fuel gas heater and protect the HP |v |v 
80-TIT-022B HH | System and LP fuel gas systems from excessively high 
temperatures 
46 |80-TIT-019A HH, | Fuel Gas To cut the power supply in the event of thermal Y 
80-TIT-019B HH | System overload to the heater. 
47 |80-TDI-XXX LL Fuel Gas To protect the gas turbines from non superheated Vv 
System gas 
54 |30-LIT-344 HH Flare To shut the plant down if the is high level in the Viv 
flare KO drum. 
4.3 IPFs Classified SIL 1 
Table 4-3 contains a list of the 19 IPFs categorised as SIL 1. 
Table 4-3: IPFs with Classification SIL 1 
WIS | Inst. Tag System Role of IPF Driving 
No Risk 
Gs |E 
1 | 80-LIT-101 LL | Process Gas | To protect the condensate suction drum from v 
Compression | overpressure from compressor suction drum and 
avoid PSV lifting. 
3 | 80-PIT-110 LL Process Gas | To protect the compressor from low suction v 
Compression | pressure and prevent flow to export manifold 
4 | 80-PIT-111 HH | Process Gas | To trip the compressor and discharge cooler on v 
Compression | high discharge pressure and prevent flow to 
export manifold 
8 | 80-TIT-108 LL Process Gas | To trip compressor discharge cooler fan at low Lë 
Compression | discharge temperature. 
10 | 80-LIT-104 LL Process Gas | To protect the condensate separator from v 
Compression | overpressure from compressor discharge drum 
and avoid PSV lifting. 
12 | 80-LIT-002ALL | Condensate | To prevent export pump damage. v 
Drums and 
Pumps 
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WIS | Inst. Tag System Role of IPF Driving 
No Risk 
Gs Us 
13 | 80-LIT-002A Condensate Prevent condensate carryover into the fuel gas v 
HH Drums and system and flash gas compressor (future). 
Pumps 
14 | 80-PT-002A HH | Condensate | To prevent overpressure of the condensate v 
Drums and suction drums. 
Pumps 
16 | 80-PI-XXXHH | Condensate | To protect the discharge piping of the condensate | Y 
A/B/C Drums and transfer pump against over pressure. 
Pumps 
18 | 80-LIT-002B Condensate Prevent condensate carryover into the fuel gas v 
HH Drums and system and flash gas compressor (future). 
Pumps 
19 | 80-PT-002B HH | Condensate | To prevent overpressure of the condensate v 
Drums and separator 
Pumps 
32 | 80-PIT-075LL | Air and To isolate the plant air supply in order to maintain v 
1 Nitrogen the instrument air supply as long as possible 
Systems 
33 | 80-PIT-075LL | Air and To isolate the nitrogen generator air supply in v 
2 Nitrogen order to maintain the instrument air supply as long 
Systems as possible 
35 | 80-PIT-085 LL Air and To isolate non-essential users to protect supply to Vv 
Nitrogen essential users (compressors) 
Systems 
37 | 80-LIT-005 HH | Fuel Gas To prevent liquid carry over into the Mercury v 
System Removal Unit and downstream equipment. 
38 | 80-PIT-004 HH | Fuel Gas To prevent overpressure of HP fuel gas system v 
System 
41 | 80-TIT-005 HH | Fuel Gas To protect the heater elements from over-heating. Y 
System 
51 | 80-LIT-008 HH | Fuel Gas To prevent liquid carry into the LP fuel gas d 
System distribution system. 
53 | 65-LIT-002 HH | Closed Drain | To prevent the closed drains drum overflowing into v 
System the cold vent and not to allow the plant to operate 
when the closed drain drum is full 
4.4 IPFs Classified SIL 0 
Table 4-4contains a list of the 22 IPFs categorised as SIL 0. 
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Table 4-4: IPFs with Classification SIL 0 
WIS | Inst. Tag System Role of IPF Driving 
No Risk 
S | HE 
15 | 80-LIT-021ALL | Condensate | To prevent condensate export to the produced = 
Drums and water treatment package and ultimately gas blow- 
Pumps by. 
17 | 80-PIT-O10A LL, | Condensate | Protect the pumps against low suction pressure. 
sais e ge AA i Note: These were changed by the HAZOP to 
high vibration or low flow trips - A high 
vibration alarm and a high-high vibration trip 
will be provided for each of the pumps. 
20 | 80-LIT-021B LL | Condensate | To prevent condensate export to the produced 
Drums and water treatment package and ultimately gas blow- 
Pumps by 
21 | BO-PI-OZOA LL Flash Gas To protect the flash gas compressor from low 
Compression | suction pressure. 
22 | 80-PIT-021A HH | Flash Gas To trip the flash compressor and protect the 
Compression | discharge piping from over pressure 
23 | 80-TIT-004A HH | Flash Gas To trip the compressor and to protect discharge 
Compression | piping from high temperature. 
24 | 80-VIT-001A-HH | Flash Gas To trip the compressor at high compressor 
Compression | vibration and prevent damage to the compressor 
25 | 80-TIT-002A HH | Flash Gas To trip the compressor at high compressor 
Compression | bearing temperature and prevent damage to the 
compressor. 
26 | BO-PIT-OZOB LL | Flash Gas To protect the flash gas compressor from low 
Compression | suction pressure. 
27 | 80-PIT-021B HH | Flash Gas To trip the flash compressor and protect the 
Compression | discharge piping from over pressure 
28 | 80-TIT-004B HH | Flash Gas To trip the compressor and to protect discharge 
Compression | piping from high temperature. 
29 | 80-VIT-001B HH | Flash Gas To trip the compressor at high compressor 
Compression | vibration and prevent damage to the compressor 
30 | 80-TIT-002B HH | Flash Gas To trip the compressor at high compressor 
Compression | bearing temperature and prevent damage to the 
compressor. 
34 | 50-PIT-079 Air and To allow controlled shut down of the plant whilst 
A/B/C LL Nitrogen there is still sufficient inventory of instrument air to 
Systems allow this to occur. 
36 | 80-LIT-005 LL Fuel Gas Prevent gas blow by from HP Fuel Gas KO drum 
System to the closed drains drum. 
39 | 80-PIT-004 LL Fuel Gas To trip the compressors and power generators at 
System low fuel gas pressure. 
40 | 80-TIT-007 HH Fuel Gas Prevent over heating of flash gas to HP fuel gas 
System feed. 
42 | 80-FI-XXX LL Fuel Gas Prevent over heating of flash gas to HP fuel gas 
System feed. 
48 | 80-LIT-008 LL Fuel Gas Prevent gas blow by from LP Fuel Gas KO drum 
System to the closed drains drum 
49 | 80-PIT-053 LL Fuel Gas To open the back-up fuel gas supply to essential 
System users (flare pilots and purges) if the LP fuel gas 
supply is lost. 
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WIS | Inst. Tag System Role of IPF Driving 
No Risk 
S/F JE 
50 | 80-PIT-053 HH Fuel Gas To protect the LP fuel gas knock out drum. s oS os 
System 
52 | 65-LIT-002 LL Closed Drain | Protect closed drains drum pump 
System 


4.1 IPFs by Dominant Aspect 
The distribution of IPFs by dominant factor is as follows: 


Safety 6 
Financial 23 
Environmental 0 
More than 1 factor 3 
SIL 0 for all 3 factors 22 


It is noteworthy that the predominant factor is financial risk due to loss of production. 
4.2 Recommendations 


One recommendation was made during the SIL assessment, to consider providing 
separate initiators on duties where the same instrument provides input into two 
distinct outputs under two distinct initiating conditions. This is important where there 
may be an interaction between two events. For example, if failure of the low low level 
switch on a vessel closes such as the compressor suction drum the liquid outlet 
route the liquid level will rise and may eventually carry over into the compressor as 
the high high level switch will also have failed. 


43 Safety Action Management System (SAMS) 


All the key study assumptions, actions and recommendations will be captured and 
tracked in the GOGC SAMS register in accordance with the GOGC procedure (CON- 
PR-460, Ref. 7). 


This register will list all actions arising from the HAZID / HAZOP / SIL workshops in a 
simple spreadsheet format for action and information. It will also include all 
recommendations for further work contained in any formal safety studies and any 
HS&E concerns formally raised by discipline engineers. The register will indicate the 
status of all actions at the end of FEED and where these actions have been 
addressed in the project documentation. 
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Qasr SIL Assessment 
Worksheet Number: 1 
GENESIS 
Trip: 80-LIT-101 LL 
System No. / Name: Process Gas Compression 
P&ID No: 12211 


Role of protection function: | To protect the condensate suction drum from overpressure from compressor suction drum and avoid PSV lifting. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of 80-LIC-102 Low 3 - 30 yrs 


= 


Consequence: Over pressurise both condensate suction drum, which could lead to loss of containment. Potential for fire and explosion causing 
With no protection. multiple deaths. Reportable release. Los of several months production. 


rer Ee mecessaryto | Glose ESDV-103. Isolate the condensate outlet from QA-V-8001A 
Process condition detected by 80-LIT-101 

LL 80-LIT-101 LL 

Final actuation device(s) necessary to 

prevent hazard: ESDV-103 

Functional requirements for orderly 

shutdown and start-up: Auto resetof ESDV-103, when level is restored. 


Method of Determining required integrity levels 


Exposure Time (Rory FEE Rn EE 
Avoidance Probabiiy(P or NUJ 
Demand Rate (H, Lor vi 


integrity Required EL 
Other Protection Systems: [PI-002A/B HH, PSV-007 AB rr O ü O 002A/B HH, PSV-007 AB 


Integrity reduction (other protection) 

Integrity reducton (assumptions) EE SEE EET EE EE) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Level will rise in the compressor suction drum. Ifthecompressor trips there is a short term loss of production but if liquid carries over i 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 


Document No. Sheet Revision: 
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Qasr SIL Assessment 
Worksheet Number: 2 
GENESIS 
Trip: 80-LIT-101 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12211 


Role of protection function: |Prevent liquid carry-over from compressor suction drum into gas compressor. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of 80-LIC-102. Low 3 - 30 yrs 


ed EE 


Consequence: Liquid carry over into compressor causing mechanical damage, taking several weeks to repair. Potential loss of containment from 
With no protection. compressor seals. Slight injury, no significant enviromental damage (RR). In early production there is a spare compressor available. 
In later production with series operation of the compressors, failure will lead to loss of production but at a lower producing rate. 


ere necessaty to Trip compressor and shutin the compression train. 
Process condition detected by 80-LIT-101 

HH 80-LIT-101 HH 

Final actuation device(s) necessary to ` 

prevent hazard: Compressor trip system. 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences SE ME MR — 

Exposure me Ror RE 

Avoidance Probability (P or NU 

Demand Rate For) 
EE SC 


Other Protection Systems: None Specified 


'egigredusien (otherprowecion) ||] 
integryreducion (assumptions) EE EE EE) 
Revised integrity required [ H OE 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 


Document No. Sheet Revision: 
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Qasr SIL Assessment 
Worksheet Number: 3 
GENESIS 
Trip: 80-PIT-110 LL 
System No. / Name: Process Gas Compression 
P&ID No: 12212 


Role of protection function: |To protect the compressor from low suction pressure and prevent flow to export manifold 


Hazard Assessment Process: 


SIL MEETING 


Events leading to the hazard Event Frequency 


1 ESDV-101AB fail closed L Low 3 - 30 yrs 
2 

PV-XXX (throttle valve) fail closed t Low 3 - 30 yrs 
3 ) 

Compressor control system fail L Low 3 - 30 yrs 


Consequence: Surge of compressor, potential mechanical damage. Compressor outof service for several weeks. No injury to personnel or damage 
With no protection. to the enviroment.In early production there is a spare compressor available. In later production with series operation of the 
compressors, failure will lead to loss of production but at a lower producing rate. 


SE necessaryto Anti surge control. 
Process condition detected by 80-PIT-110 

LL BO-PI-110 LL, 80-PI-109 L 
Final actuation device(s) necessary to ` 

prevent hazard: Compressor trip system. 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


ak es N MT] 

Exposure Time Ror) EE 

Avoidance Probably (P o COS 

Demand Rate FL or) EE EE EE 
Bësse SC 


Other Protection Systems: Compressor condition monitoring, vibration etc. 


Integrity reduction (other protection) 

Integrity reducton (assumptions) _— ee TE 
Revised integrity required [ H OE 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 


Document No. Sheet Revision: 
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Qasr SIL Assessment 
Worksheet Number: 4 
GENESIS 
Trip: 80-PIT-111 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12212 


Role of protection function: |To trip the compressor and discharge cooler on high discharge pressure and prevent flow to export manifold 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


ESDV-102A fail closed. Low 3 - 30 yrs 


SE EE 


Consequence: Over-rating of the compressor and potential mechanical damage. Several weeks downtime to repair damage. Loss of containment 
With no protection. leading to fire and explosion, multiple deaths, reportable damage to the enviroment.n early production there is a spare compressor 
available. In later production with series operation of the compressors, failure will lead to loss of production but at a lower producing 


rate. 


SE necessaryto Ant-surge control. 

Process condition detected by 80-PIT-111 

HH 80-PIT-111 HH, 80-PIT-112 H 
Final actuation device(s) necessary to ` 

prevent hazard: Compressor trip system. 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory EE EE EE 
Avoidance Probabiiy(P or NUJ 
Demand Rate (H, Lor vi 


integrity Required ER 
Other Protection Systems: Full flow relief valve on compressor discharge. 


Integrity reduction (other protection) 

Integrity reducton (assumptions) EE ee ET 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 
GENESIS 


Qasr Compression Project FEED 


` 


Qasr SIL Assessment 
Worksheet Number: 5 
GENESIS 
Trip: 80-TIT-102 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12212 


Role of protection function: |To trip the compressor and discharge cooler on high discharge temperature and prevent flow to export manifold 


Hazard Assessment Process: 


Team: See Attendance List 
SIL MEETING (ag: | 
Date: 03/10/2011 


Events leading to the hazard Event Frequency 


7 


Failure of an unstream cooler. Low 3 - 30 yrs 


Low compressor suction pressure. Low 3 - 30 yrs 


= 


Consequence: Exceed the design temperature of the discharge system including the after-cooler. Potential mechanical damage to the compressor, 
With no protection. several weeks down-time to repair. Damage to the after-cooler. Loss of containment, potential to injure personnel and reportable 
damage to the enviroment..In early production there is a spare compressor available. In later production with series operation of the 


compressors, failure will lead to loss of production but at a lower producing rate. 


Functional requirements necessary to S 
Trip the compressor. 
prevent hazard: 
Process condition detected by 80-TIT-102 
HH 80-TIT-102 HH, 80-TIT-101 H, 80-TIT-103 H 
Final actuation device(s) necessary to ` 
prevent hazard: Compressor trip system. 
Functional requirements for orderly Se 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences SE ME MR — 

Exposure me Ror A EE 

Avoidance Probability (P or ND EE EE 

Demand Rate (HL or Wo) 
EE SC 


EE EE —————————— 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 
GENESIS 


Qasr Compression Project FEED 


` 


Qasr SIL Assessment 
Worksheet Number: 6 
GENESIS 
Trip: 80-VIT-101 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12212 


Role of protection function: |To trip the compressor and discharge cooler at high compressor vibration and prevent flow to export manifold 


Hazard Assessment Process: 


Team: See Attendance List 
SIL MEETING Tee: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Compressor running out of balance, due to bearing failure, liquid carry-over or other similar causes, Low 3 - 30 yrs 


= 


Consequence: Mechanical damage to the compressor and loss of containment. Potential mechanical damage to the compressor, several weeks 
With no protection. down-time to repair. Damage to the after-cooler. Loss of containment, potential to injure personnel and reportable damage to the 
enviroment.In early production there is a spare compressor available. In later production with series operation of the compressors, 


failure will lead to loss of production but at a lower producing rate. 


Functional requirements necessary to S 
Trip compressor 
prevent hazard: 


Process condition detected by 80-VIT-101 
HH 80-VIT-101 HH (a pre-alarm is required) 


Final actuation device(s) necessary to ` 

prevent hazard: Compressor tripsystem. 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences SE ME MR — 

Exposure me Ror A EE 

Avoidance Probability (P or ND EE EE 

Demand Rate (HL or Wo) 
EE SC 


EE EE —————————— 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 
GENESIS 


Qasr Compression Project FEED 


` 


Qasr SIL Assessment 
Worksheet Number: DH 
GENESIS 
Trip: 80-TIT-110 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12212 


Role of protection function: |To trip the compressor and discharge cooler at high compressor bearing temperature and prevent flow to export manifold 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Failure of the bearing Low 3-30 yrs 


Failure of the lubrication system. Low 3-30 yrs 


EE NN EE” Gal 
see E 


Consequence: Potential mechanical damage to the compressor, several weeks down-time to repair. Damage to the after-cooler. Loss of 
With no protection. containment, potential to injure personnel and reportable damage to the enviroment. In early production there is a spare compressor 
available. In later production with series operation of the compressors, failure will lead to loss of production but at a lower producing 


rate. 


Functional requirements necessary to $ 
Compressor trip 
prevent hazard: 


Process condition detected by 80-TIT-110 
HH 80-TIT-110 HH (requires pre-alarm) 


Final actuation device(s) necessary to ` 

prevent hazard: Compressor trip system 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences SN —E TR — 

Exposure me Ror A EE EE 

Avoidance Probability (P or ND 

Demand Rate (HL or Wo) 
EE SC 


EE EE ——————————— 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 
GENESIS 


Qasr Compression Project FEED 


` 


Qasr SIL Assessment 
Worksheet Number: 8 
GENESIS 
Trip: 80-TIT-108 LL 
System No. / Name: Process Gas Compression 
P&ID No: 12213 


Role of protection function: |To trip compressor discharge cooler fan at low discharge temperature. 


Hazard Assessment Process: 
Team: See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Fan fails to stop on air fin cooler. Low 3 - 30 yrs 


SE ENE 


Consequence: Increase condensation and potential for hydrate formation. Potential production limitation in end of line facility.Potential requirement to 
With no protection. shutdown the compressor to clear the hydrate choke. No risk to personnel or the enviroment. In early production there is a spare 
compressor available. In later production with series operation of the compressors, failure will lead to loss of production but at a lower 


producing rate. 


Functional requirements necessary to Trip the fans on the air cooler. 
prevent hazard: 

Process condition detected by 80-TIT-108 

LL 80-TIT-108 LL, 80-TIC-107 L 
Final actuation device(s) necessary to S 

prevent hazard: Fan trip 

Functional reguirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


a E WE LE 

Exposure Time Ror) EE 

Avoidance Probably (P o ———— 

Demand Rate FL or) EE EE 
Bësse SC 


DE ER EE GR SES 
Other Proteation Systems: OO 
E ER E 
integrity reducton (assumptions) EE EE EF] 
Revised integrity required N N 

Overall Integrity Reguired: 
Consequences of Spurious Trip High export gas temperature and increased corrosion in the export pipelines 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 
GENESIS 


Qasr Compression Project FEED 


` 


Qasr SIL Assessment 
Worksheet Number: 9 
GENESIS 
Trip: 80-TIT-108 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12213 


Role of protection function: |To trip compressor and discharge cooler at high discharge temperature and prevent flow to export manifold 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Loss of fans on the air fin cooler Low 3 - 30 yrs 


ed EE 


Consequence: Hot gas exported into the pipelines, leading to increased corrosion and potential to exceed the design temperature of the export 
With no protection. pipelines. Hot condensate reutrn to phase 1 and 2 separators. Cumulative damage to the export pipelines with possible requirement 
for early replacement, and reduced production during replacement period. Enviromental damage caused by leakage from pipeline. 


Functional requirements necessary to 5 
Trip the compressor 
prevent hazard: 
Process condition detected by 80-TIT-108 
HH 80-TIT-108 HH, 80-TIC-107 H 
Final actuation device(s) necessary to ` 
prevent hazard: Compressor trip system 
Functional requirements for orderly Se 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time Ror H sss 

Avoidance Probability (P or NU) CC DT 

Demand Rate F, L, or) EE EE N EI 
ds a 

Other Protection Systems: Corrosion inhibitor 


Integy reduction otherprowecion [Cd 
Integrity reducion (assumptions) EE EE EE] 
Revised integrity required [ H O OE 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 0 

GENESIS 
Trip: 80-LIT-104 LL 
System No. / Name: Process Gas Compression 
P&ID No: 12214 


Role of protection function: |To protect the condensate separator from overpressure from compressor discharge drum and avoid PSV lifting. 


Hazard Assessment Process: 
SIL MEETING 
Events leading to the hazard 


1 p 
Failure of level control 


5 
Consequence: Gas blow byto phases 1 & 2 separators leading to inefficient operation (design pressure of upstream and downstream equipment is 
With no protection. the same). 


rer Ee FEST Isolated the liquid outlet from the discharge drum. 
Process condition detected by 80-LIT-104 

LL 80-LIT-104 LL, 80-LIC-105 L 

Final actuation device(s) necessary to 

prevent hazard: ESDV-104 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences aC (Sc LS 
posure Time (Tor EE DEE 
Avoidance Probability (P or NL) fo 
Demand Rate (AL, or) EE 
integrity Required ER 
E EE E EN 
ihe Protectan Saves eT 
integiy reduction other prowefony | | Js 
ER — IE S 
Revised integrity required N N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Carry over see LIT-104 HH 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 1 

GENESIS 
Trip: 80-LIT-104 HH 
System No. / Name: Process Gas Compression 
P&ID No: 12214 


Role of protection function: |Prevent liquid carry over into the second stage compression system and gas export manifold 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of level control Low 3 - 30 yrs 


ad EE 


Consequence: Carry-over is mainly water which will increase the corrosion rate in the pipeline. Cumulative damage to the export pipelines with 
With no protection. possible requirement for early replacement, and reduced production during replacement period. Enviromental damage caused by 
leakage from pipeline. 


Functional requirements necessary to S 
Trip the compressor 
prevent hazard: 
Process condition detected by 80-LIT-104 
HH 80-LIT-104 HH, 80-LIC-105 H 
Final actuation device(s) necessary to ` 
prevent hazard: Compressor trip system 
Functional requirements for orderly Se 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time Ror H sss 

Avoidance Probability (P or NU) CC DT 

Demand Rate F, L, or) EE EE N EI 
ds a 

Other Protection Systems: Corrosion inhibitor 


Integy reduction otherprowecion [Cd 
Integrity reducion (assumptions) EE EE EE] 
Revised integrity required [ H O OE 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
Qasr SIL Assessment 
Worksheet Number: 1 2 

GENESIS 
Trip: BO-LIT-OOPALL 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12250 


Role of protection function: |To prevent export pump damage. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Level control failure Low 3 - 30 yrs 


= 


Consequence: Damage the operating condensate export pumps (normally 2). Reduced production to 50% for one week. Potential for loss of 
With no protection. containment through pump seals with minor injuries to personnel and damage to the enviroment. 


Functionalirequirements necessary to Isolated the liquid outlet from the condensate suction drum and trip the pumps. 
prevent hazard: 

Process condition detected by 80-LIT- 

OO2ALL 80-LIT-002A LL, 80-LIC-001 L 

Final actuation device(s) necessary to p 

prevent hazard: Pump trip 

Functional requirements for orderly 2 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences Le RR] 
posure Time RoR ER 
Avoidance Probability (P or NL) 
Demand Rate (AL ore) 
integrity Required ER 
E E E ER 
ier PotecTon Stems eT 
sae EEN Js 
ER — IE 
Revised integrity required [ N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 3 

GENESIS 
Trip: 80-LIT-002A HH 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12250 


Role of protection function: | Prevent further condensate flow to the condensate suction drum and condensate carry over into the fuel gas system. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Level control failure Low 3 - 30 yrs 


ed EE 


Consequence: Liquid carry over into the HP fuel gas KO drum may cause the fuel gas system to trip requiring one shift to recover production. Liquid 
With no protection. carry over into the flash gas compressor (future) will cause mechanical damage to the compressor and loss of flash gas to flare 
whilst the compressor is repaired. 


Functional requirements necessary to Close all inlets to the condensate suction drum. 
prevent hazard: 

Process condition detected by 80-LIT- 

002A HH 80-LIT-002A HH, 80-LIC-001AH 

Final actuation device(s) necessary to 

prevent hazard: ESDV-O11A, ESDV-104, 204, 304 & 404 close 
Functional requirements for orderly 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences ge IT 
posure Time (Tor ———— ee ed 
Avoidance Probability (P or NL) fo 
Demand Rate (AL, or) oT, 
integrity Required ER 
E E E ER 
ihe Protectan Saves eT 
sae EEN Js 
EE — IE S 
Revised integrity required [ N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of production for a shift. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 4 

GENESIS 
Trip: 80-PT-002A HH 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12250 


Role of protection function: |To prevent overpressure of the condensate suction drums. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Pressure control failure Low 3 - 30 yrs 


= 


Consequence: Potential to over pressure both the condesate suction drums causing loss of containment leading to fire explosion causing multiple 
With no protection. deaths, damage to the enviroment and extended shut down. 


Functionalirequirements necessary te Closed all the inlets to the condensate suction drum. 
prevent hazard: 

Process condition detected by 80-PT- 

002A HH 80-PT-002A HH, 80-PIC-003 H, 80-PI-002AH 

Final actuation device(s) necessary to 

prevent hazard: ESDV-011A, ESDV-104, 204, 304 & 404 close 
Functional requirements for orderly SS 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Ca 

Exposure Time Ror F EE EE 

Avoidance Probability (P or NL) 

Demand Rate LL or VL) 

can Et 

EE Ee Ee Ee We 

Other Protection Systems: PSV-007A (to be uprated for full flow compressor suction drums) and PSV-006 

Integrity reduction (other protecion) 

Integrity reducton (assumptions) EE EET TE 

Revised integrity required 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of production for a shift. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 5 

GENESIS 
Trip: 80-LIT-021ALL 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12250 


Role of protection function: |To prevent condensate export to the produced water treatment package 


Hazard Assessment Process: 
Team: See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of interface level control. Low 3 - 30 yrs 


SE EE 


Consequence: Condensate flowing into the degasser and from there into the API separator and potentially into the evaporation pond. Potential for 
With no protection. flashed gas release into the degasser and major discharge of flammable gas from the cold vent. Potenial for injury for personnel if 
ignites, reportable enviromental release. Loss of a proportion of the produced condensate 


Functional requirements necessary te Isolate the water outlet from the condensate suction drum. 
prevent hazard: 

Process condition detected by 80-LIT- 

021ALL 80-LIT-021A LL, 80-LIC-016A L 

Final actuation device(s) necessary to 

prevent hazard: ESDV-026A 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ER EE Rn FEE EE 
Avoidance Probabiliy Por NU] 
Demand Rate (H, Lor Vo) 


Integrity Required EIL 
Other Protection Systems: API separator downstream of the degassers will recover some of the condensate. 


Integniyreducton(oherpowcioy Ep 
integrity reducton (assumptions) EE EE EI ETE 
Revised integrity required [ H OE 

Overall Integrity Required: 
Consequences of Spurious Trip Water will carry over into the condensate and be exported into the pipelines, causing increased corrosion, see 80-LI-104 HH 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 6 

GENESIS 
Trip: 80-PI-XXX HH A/B/C 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12250 


Role of protection function: |To protect the discharge piping of the condensate transfer pump against over pressure. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Blocked outlet on the condensate export pump. Low 3 - 30 yrs 


= 


Consequence: Potential to exceed the design pressure of the piping, loss of containment. Potential for fire explosion causing fatalities and significant 
With no protection. damage to the enviroment. Potential for loss of production and cost of repair. 


Functional requirements necessary to Trip the pum 

prevent hazard: 1p pump 

Process condition detected by 80-PI-XXX 

HH A/B/C 80-PI-XXX HH A/B/C, 80-PI-012 A/B/C H 
Final actuation device(s) necessary to p 

prevent hazard: Pump trip 

Functional requirements for orderly - 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


GEES 
EE BEER 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
TE ac 
EE Ed EECH N 
EE 
EC 
EE EE 
Revised integrity required 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip No loss of production. Auto start the standby pump 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
i i ae} 
Qasr Compression Project FEED 
É Qasr SIL Assessment 
Worksheet Number: 1 Fá 

GENESIS 
Trip: 80-PIT-010ALL, 80-PIT-010B LL, 80-PIT-010C LL (Changed by the HAZOP to high vibration or low flow trip) 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12251 


Role of protection function: |Protect the pumps against low suction pressure 


Hazard Assessment Process: 
SIL MEETING 
Events leading to the hazard 


7 
Block inlet to the pumps 


5 
Consequence: Mechanical damage to the relevant condensate export pump. Loss of containment from the seal, minor enviromental impact. Potential 
With no protection. for slight injury for personnel. No impact on production as there is a spare pump, cost of repair to the pump. 


Functional requirements necessary to Tip the pum 
prevent hazard: p he pump 


Process condition detected by 80-PIT- 
010A LL, 80-PIT-010B LL, 80-PIT-010C LL |80-PIT-010ALL, 80-PIT-010B LL, 80-PIT-010C LL (Changed by the HAZOP to high vibration or low flow trip) 


Final actuation device(s) necessary to. ` F 
prevent hazard: Pump trip 
Functional requirements for orderly 2 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences E REEL RR 
posure Time RoR ER 
Avoidance Probability (P or NL) 
Demand Rate (AL ore) 
integrity Required ER 
E EE N 
ier PotecTon Stems eT 
sae EEN J ss 
ER — IE 
Revised integrity required [ N 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip No consequences. Stand by pump will auto start. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 8 

GENESIS 
Trip: 80-LIT-002B HH 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12254 


Role of protection function: | Prevent further condensate flow to the condensate suction drum and condensate carry over into the fuel gas system. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Level control failure Low 3 - 30 yrs 


ed EE 


Consequence: Liquid carry over into the HP fuel gas KO drum may cause the fuel gas system to trip requiring one shift to recover production. Liquid 
With no protection. carry over into the flash gas compressor (future) will cause mechanical damage to the compressor and loss of flash gas to flare 
whilst the compressor is repaired. 


Functional requirements necessary ie Close all inlets to the condensate suction drum. 
prevent hazard: 

Process condition detected by 80-LIT- 

002B HH 80-LIT-002B HH, 80-LIC-001B H 

Final actuation device(s) necessary to 

prevent hazard: ESDV-011B, ESDV-104, 204, 304 & 404 close 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences ge IT 
posure Time (Tor ———— ee ed 
Avoidance Probability (P or NL) fo 
Demand Rate (AL, or) oT, 
integrity Required ER 
E E E ER 
ihe Protectan Saves eT 
sae EEN Js 
EE — IE S 
Revised integrity required [ N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of production for a shift. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 1 9 

GENESIS 
Trip: 80-PT-002B HH 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12254 


Role of protection function: |To prevent overpressure of the condensate separator 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Pressure control failure Low 3 - 30 yrs 


= 


Consequence: Potential to over pressure both the condesate suction drums causing loss of containment leading to fire explosion causing multiple 
With no protection. deaths, damage to the enviroment and extended shut down. 


Functionalirequirements necessary te Closed all the inlets to the condensate suction drum. 
prevent hazard: 

Process condition detected by 80-PT- 

002B HH 80-PT-002B HH, 80-PIC-003 H, 80-PI-002B H 

Final actuation device(s) necessary to 

prevent hazard: ESDV-011B, ESDV-104, 204, 304 & 404 close 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Ca 

Exposure Time Ror F EE EE 

Avoidance Probability (P or NL) 

Demand Rate LL or VL) 

can Et 

EC Ee Ee WE 

Other Protection Systems: PSV-007B (to be uprated for full flow compressor suction drums) and PSV-006 

Integrity reduction (other protecion) 

Integrity reducton (assumptions) EE EET EET TE] 

Revised integrity required 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of production for a shift. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 0 

GENESIS 
Trip: 80-LIT-021B LL 
System No. / Name: Condensate Drums and Pumps 
P&ID No: 12254 


Role of protection function: |To prevent condensate export to the produced water treatment package and ultimately gas blow-by 


Hazard Assessment Process: 
Team: See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of interface level control. Low 3 - 30 yrs 


ed EE 


Consequence: Condensate flowing into the degasser and from there into the API separator and potentially into the evaporation pond. Potential for 
With no protection. flashed gas release into the degasser and major discharge of flammable gas from the cold vent. Potenial for injury for personnel if 
ignites, reportable enviromental release. Loss of a proportion of the produced condensate 


Functional requirements necessary te Isolate the water outlet from the condensate suction drum. 
prevent hazard: 

Process condition detected by 80-LIT- 

021BLL 80-LIT-021B LL, 80-LIC-016B L 

Final actuation device(s) necessary to 

prevent hazard: ESDV-026B 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ER EE Rn FEE EE 
Avoidance Probabiliy Por NU] 
Demand Rate (H, Lor Vo) 


Integrity Required EIL 
Other Protection Systems: API separator downstream of the degassers will recover some of the condensate. 


Integniyreducton(oherpowcioy Ep 
integrity reducton (assumptions) EE EE EI ETE 
Revised integrity required [ H OE 

Overall Integrity Required: 
Consequences of Spurious Trip Water will carry over into the condensate and be exported into the pipelines, causing increased corrosion, see 80-LI-104 HH 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 1 

GENESIS 
Trip: 80-PLO70ALL 
System No. / Name: Flash Gas Compression 
P&ID No: 12261 


Role of protection function: |To protect the flash gas compressor from low suction pressure. 


Hazard Assessment Process: 


SIL MEETING 


Events leading to the hazard Event Frequency 


: ESDV-O12AB fail closed G Low 3 - 30 yrs 
2 2 
Failure of 80-PIC-003 L Low 3 - 30 yrs 


N Ed WE 
N Ed 
ad EE EE eee 
Consequence: Mechanical damage to the flash gas compressor. No loss in production as there is a spare compressor. Cost of repair of the 

With no protection. compressor. Slight risk of injury of personnel and impact on the enviroment. 


Functional requirements necessary to S 
Trip the compressor 
prevent hazard: 
Process condition detected by 80-PI-070A 
LL 80-PI-070A LL, 80-PIC-003 L 
Final actuation device(s) necessary to ` 
prevent hazard: Compressor trip 
Functional requirements for orderly 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences RR IR 

Exposure ime Ror RE 

Avoidance Probability (P or NL) 

Demand Rate H, L or Wy) 
NEEN 

Other Protection Systems: EE EE EE 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of gas to flare until stand by flash gas compressor is started. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 2 

GENESIS 
Trip: 80-PIT-021A HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12261 


Role of protection function: |To trip the flash compressor and protect the discharge piping from over pressure 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Blocked discharge Low 3 - 30 yrs 


= 


Consequence: Over pressure the discharge piping, loss of containment, injury to personnel and impactto the enviroment. Loss of gas to the flare and 
With no protection. cost of repair. 


Functional requirements necessary to Trip the flash gas compressor 
prevent hazard: 

Process condition detected by 80-PIT- 

021A HH 80-PIT-021A HH, BO-PA-O20AH 
Final actuation device(s) necessary to ` 
prevent hazard: Flash gas compressor tip 
Functional reguirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences RM] RR] 
Epos Time (Tor EE IE — 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
integrity Required ER 
EE EE N 
EE 
EC 
EE EE 
Revised integrity required N N 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term loss of gas to flare until stand by compressor starts. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 


Document No. Sheet Revision: 


Genesis Oil & Gas Consultants Ltd Page 50 of 84 Date: Nov 2011 
File name: J08509A-F-RT-20055 Rev D2 SIL Assessment Report Rev: D2 


SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 3 

GENESIS 
Trip: 80-TIT-004A HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12261 


Role of protection function: |To trip the compressor and to protect discharge piping from high temperature. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Blocked discharge Low 3-30 yrs 


High temperature gas from upstream Low 3 - 30 yrs 


w 


Consequence: Exceed the design temperature of the discharge piping, loss of containment, injury to personnel and impact to the enviroment. Loss of 
With no protection. gas to the flare and cost of repair. 


Functional requirements necessary to Trip the flash gas compressor 
prevent hazard: 

Process condition detected by 80-TIT- 

004A HH 80-TIT-004A HH, 80-TI-003AH 
Final actuation device(s) necessary to ` 
prevent hazard: Flash gas compressor trip 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences E RR] 
Epos Time (Tor EE IE — 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
integrity Required ER 
E EE ER 
EE —————————— 
integriy reducton EEN Js 
EE — IE S 
Revised integrity required [ H OE 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term loss of gas to flash until stand by compressor starts. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 4 

GENESIS 
Trip: 80-VIT-001A-HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12261 


Role of protection function: |To trip the compressor at high compressor vibration and prevent damage to the compressor 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Compressor running out of balance, due to bearing failure, liquid carry-over or other similar causes, Low 3 - 30 yrs 


= 


Consequence: Mechanical damage to the compressor, loss of containment. Minor risk of injury to personnel and impact to the enviroment. No loss of 
With no protection. production, only cost of repair. 


Functional requirements necessary to 5 
d S necessary Trip the flash gas compressor 
prevent hazard: 


Process condition detected by 80-VIT- 
001A-HH 80-VIT-001A-HH (requires a pre-alarm) 


Final actuation device(s) necessary to J 

prevent hazard: Flash gas compressor trip system 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ER EE EE 
Avoidance Probabiliy Por NU] 
Demand Rate (H, Lor Vo) 


Integrity Required EL 
Other Protection Systems: EN 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of gas to flare until stand by compressor is started up by the operator. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 5 

GENESIS 
Trip: 80-TIT-002A HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12261 


Role of protection function: |To trip the compressor at high compressor bearing temperature and prevent damage to the compressor. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Failure of the bearing Low 3-30 yrs 


Failure of the lubrication system. Low 3-30 yrs 


w 


Consequence: Mechanical damage to the compressor, loss of containment. Minor risk of injury to personnel and impact to the enviroment. No loss of 
With no protection. production, only cost of repair. 


Functional requirements necessary to x 
d S necessary Trip the flash gas compressor 
prevent hazard: 


Process condition detected by 80-TIT- 
002A HH 80-TIT-002A HH (requires a pre-alarm) 


Final actuation device(s) necessary to 

prevent hazard: Flash gas compressor trip system 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ER EE EE 
Avoidance Probabiliy Por NU] 
Demand Rate (H, Lor Vo) 


Integrity Required EL 
Other Protection Systems: EN 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of gas to flare until operator starts up stand by flash gas compressor 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 6 

GENESIS 
Trip: 80-PIT-070B LL 
System No. / Name: Flash Gas Compression 
P&ID No: 12262 


Role of protection function: |To protect the flash gas compressor from low suction pressure. 


Hazard Assessment Process: 


SIL MEETING 


Events leading to the hazard Event Frequency 


: ESDV-012A fail closed G Low 3 - 30 yrs 
2 2 
Failure of PIC-003 L Low 3 - 30 yrs 


N N WE 
N Ed 
ad EE EE eee 
Consequence: Mechanical damage to the flash gas compressor. No loss in production as there is a spare compressor. Cost of repair of the 

With no protection. compressor. Slight risk of injury of personnel and impact on the enviroment. 


Functional requirements necessary to S 
Trip the compressor 
prevent hazard: 
Process condition detected by 80-PIT- 
070B LL 80-PI-070B LL, 80-PIC-003 L 
Final actuation device(s) necessary to ` 
prevent hazard: Compressor trip 
Functional requirements for orderly Se 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences E REEL EEN 
Eene Tine ROA RE ER 
Avoidance Probability (P or NL) 
Demand Rate Hor N 
integrity Required ER 
E EE N 
EE Eg 
ne we 
mass Ek 
Revised integrity required N N 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term loss of gas to flare until stand by flash gas compressor is started. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 T 

GENESIS 
Trip: 80-PIT-021B HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12262 


Role of protection function: |To trip the flash compressor and protect the discharge piping from over pressure 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Blocked discharge Low 3 - 30 yrs 


= 


Consequence: Over pressure the discharge piping, loss of containment, injury to personnel and impactto the enviroment. Loss of gas to the flare and 
With no protection. cost of repair. 


Functional requirements necessary to Trip the flash gas compressor 
prevent hazard: 

Process condition detected by 80-PIT- 

021B HH 80-PIT-021B HH, 80-PA-020B H 
Final actuation device(s) necessary to ` 
prevent hazard: Flash gas compressor tip 
Functional reguirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences RM] RR] 
Epos Time (Tor EE IE — 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
integrity Required ER 
EE EE N 
EE 
EC 
EE — E 
Revised integrity required [ H OE 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term loss of gas to flare until stand by compressor starts. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 8 

GENESIS 
Trip: 80-TIT-004B HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12262 


Role of protection function: |To trip the compressor and to protect discharge piping from high temperature. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Blocked discharge Low 3-30 yrs 


High temperature gas from upstream Low 3 - 30 yrs 


w 


Consequence: Exceed the design temperature of the discharge piping, loss of containment, injury to personnel and impact to the enviroment. Loss of 
With no protection. gas to the flare and cost of repair. 


Functional requirements necessary to Trip the flash gas compressor 
prevent hazard: 

Process condition detected by 80-TIT- 

004B HH 80-TIT-004B HH, 80-TI-003B H 
Final actuation device(s) necessary to ` 
prevent hazard: Flash gas compressor trip 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences E RR] 
Epos Time (Tor EE IE — 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
integrity Required ER 
E EE ER 
EE —————————— 
integriy reducton EEN Js 
EE — IE S 
Revised integrity required [ H OE 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term loss of gas to flash until stand by compressor starts. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 2 9 

GENESIS 
Trip: 80-VIT-001B HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12262 


Role of protection function: |To trip the compressor at high compressor vibration and prevent damage to the compressor 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Compressor running out of balance, due to bearing failure, liquid carry-over or other similar causes, Low 3 - 30 yrs 


= 


Consequence: Mechanical damage to the compressor, loss of containment. Minor risk of injury to personnel and impact to the enviroment. No loss of 
With no protection. production, only cost of repair. 


Functional requirements necessary to 5 
d S necessary Trip the flash gas compressor 
prevent hazard: 


Process condition detected by 80-VIT- 
001B HH 80-VIT-001B-HH (requires a pre-alarm) 


Final actuation device(s) necessary to i 

prevent hazard: Flash gas compressor trip system 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ER EE EE 
Avoidance Probabiliy Por NU] 
Demand Rate (H, Lor Vo) 


Integrity Required EL 
Other Protection Systems: EN 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of gas to flare until stand by compressor is started up by the operator. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 0 

GENESIS 
Trip: 80-TIT-002B HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12262 


Role of protection function: |To trip the compressor at high compressor bearing temperature and prevent damage to the compressor. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Failure of the bearing Low 3-30 yrs 


Failure of the lubrication system. Low 3-30 yrs 


w 


Consequence: Mechanical damage to the compressor, loss of containment. Minor risk of injury to personnel and impact to the enviroment. No loss of 
With no protection. production, only cost of repair. 


Functional requirements necessary to x 
d S necessary Trip the flash gas compressor 
prevent hazard: 


Process condition detected by 80-TIT- 
002B HH 80-TIT-002B HH (requires a pre-alarm) 


Final actuation device(s) necessary to J 

prevent hazard: Flash gas compressor trip system 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ER EE EE 
Avoidance Probabiliy Por NU] 
Demand Rate (H, Lor Vo) 


Integrity Required EL 
Other Protection Systems: EN 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of gas to flare until operator starts up stand by flash gas compressor 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 1 

GENESIS 
Trip: 80-PIT-062 HH 
System No. / Name: Flash Gas Compression 
P&ID No: 12262 


Role of protection function: |To protect the flash gas compression system from potential over pressurisation due to reverse flow from process gas compressors suction. 


Hazard Assessment Process: 


Team: See Attendance List 

SIL MEETING Tee: | 

$ 03/10/2011 

Events leading to the hazard Event Frequency 


7 
Process gas compressor suction manifold is packed to pressure above 72 barg. H High 0.3 - 3yrs 


Consequence: Mechanical damage to the flash gas compressor, over pressure of the flash gas compressor suction and discharge piping and 
With no protection. condensate suction drums. Otential for the major release of hydrocarbons leading to fire explosion, multiple deaths and major impact 
on the enviroment. Loss of production for an extended period. 


Functional requirements necessary te Isolate the route into the main compressor suction manifold. 
prevent hazard: 

Process condition detected by 80-PIT-062 

HH 80-PIT-062 HH, 80-PI-072 H 

Final actuation device(s) necessary to 

prevent hazard: ESDV-013 

Functional requirements for orderly SS 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time (Rory ann eR FEE 
Avoidance Probabiiy(P or NUJ 
Demand Rate (H, Lor vi 


integrity Required EL 
Other Protection Systems: | PSV-026 AB sized for reverse flow. eee AB sized for reverse flow. 


Integrity reduction (other protection) 

Integrity reducton (assumptions) EE EE EE TE 
Revised integrity required Va O Oe 

Overall Integrity Required: 
Consequences of Spurious Trip Blocked discharge from the flash gas compressor and short term loss of gas to flare. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 2 

GENESIS 
Trip: 80-PIT-075 LL 1 
System No. / Name: Air and Nitrogen Systems 
P&ID No: 12300 


Role of protection function: | To isolate the plant air supply in order to maintain the instrument air supply as long as possible 


Hazard Assessment Process: 


Team See Attendance List 

SIL MEETING (ag: | 

03/10/2011 

Events leading to the hazard Event Frequency 


7 
Loss of intrument compression capacity G Low 3 - 30 yrs 

2 7 P r 
Excessive consumption of air. t Low 3 - 30 yrs 


N Ed NEE 
N Ed 
ad EE Ee ee Eie 
Consequence: Loss of instrument air pressure causing ESD 2 shut down. 


With no protection. 


Functional requirements necessary to i 
prevent hazard: Isolate the supply to plant air. 
Process condition detected by 80-PIT- 

075 LL1 80-PIT-075 LL 1 

Final actuation device(s) necessary to 

prevent hazard: ESDV-015 

Functional requirements for orderly se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences aC (Sc LS 
posure Time (Tor EE DEE 
Avoidance Probability (P or NL) fo 
Demand Rate (AL, or) EE 
integrity Required ER 
E EE E ER 
ihe Protectan Saves eT 
sae EEN Js 
ER — IE S 
Revised integrity required N N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip No plant air available to utility points. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 3 

GENESIS 
Trip: 80-PIT-075 LL 2 
System No. / Name: Air and Nitrogen Systems 
P&ID No: 12300 


Role of protection function: |To isolate the nitrogen generator air supply in order to maintain the instrument air supply as long as possible 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 
Loss of intument compression capacity G Low 3 - 30 yrs 

2 7 P ` n 
Excessive consumption of air or nitrogen. t Low 3 - 30 yrs 


N Ed NEE 
N Ed 
N EEN N ee ee N ie 
Consequence: Loss of instrument air pressure causing ESD 2 shut down. 


With no protection. 


Functional requirements necessary to ! S 

prevent hazard: Isolate the air supply to the nitrogen generator. 
Process condition detected by 80-PIT- 

075 LL2 80-PIT-075 LL 2 

Final actuation device(s) necessary to 

prevent hazard: ESDV-016 

Functional requirements for orderly SS 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences ET —— Ww —— 

Exposure Time Ror a 

Avoidance Probability (P or NU) Ct 

Demand Rate (H, L or Wy) EE EE GENEE 
Ee 

Other Protection Systems: EE EE 


ENEE Od 
integrity reducton (assumptions) el 
Revised integrity required [ N 

Overall Integrity Required: 
Consequences of Spurious Trip Lose nitrogen generation but the inert gas receiver has an eighthour inventory of nitrogen. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
Qasr SIL Assessment 
Worksheet Number: 3 A 

GENESIS 
Trip: 50-PIT-079 A/B/C LL 
System No. / Name: Air and Nitrogen Systems 
P&ID No: 12315 


Role of protection function: |To allow controlled shut down of the plant whilst there is still sufficient inventory of instrument air to allow this to occur. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 
Loss of instrument air supply E Low 3 - 30 yrs 


Consequence: Uncontrolled shut down of the plant. 
With no protection. 


Functional requirements necessary to ESD 2 shut down of plant. 
prevent hazard: 

Process condition detected by 50-PIT-079 

A/B/C LL 50-PIT-079 A/B/C LL, 80-PIT-081 L 
Final actuation device(s) necessary to 

prevent hazard: ESD 2 shut down 

Functional requirements for orderly 7 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences er 
posure Time (Tor oo, 
Avoidance Probability (P or NL) fo 
Demand Rate (iL or) EER 
integrity Required ER 
E EE ER 
ihe Protectan Stems EE ee 
integrity reduction other prowefony | | J 
ER — IE 
Revised integrity required [ N 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of production for one shift (this is a 2 outof 3 initiation to minimise the likely hood ofa spurious trip) 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 5 

GENESIS 
Trip: 80-PIT-085 LL 
System No. / Name: Air and Nitrogen Systems 
P&ID No: 12316 


Role of protection function: |To isolate non-essential users to protect supply to essential users (compressors) 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Loss of nitrogen generator capacity Low 3-30 yrs 


Excessive demand for nitrogen Low 3-30 yrs 


w 


Consequence: The supplyto the essential consumers will notlast eight hours and compressors have to be shutdown. No risk to personnel or the 
With no protection. enviroment. 


Functional requirements necessary to K 
Isolate the supply to non essential users. 
prevent hazard: 
Process condition detected by 80-PIT-085 
LL 80-PIT-085 LL, 80-PIC-086 L 
Final actuation device(s) necessary to 
prevent hazard: ESDV-024 
Functional requirements for orderly = 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time Ror a 

Avoidance Probability (P or NU) Ct 

Demand Rate (H, L or Wy) EE EE GENEE 
Ee 

Other Protection Systems: EE EE EE EE 


ENEE Sd 
integrity reducton (assumptions) I EE EE EE 
Revised integrity required N N 

Overall Integrity Reguired: 
Consequences of Spurious Trip Flash gas compressors will trip with loss of gas to the flare and charging and discharging operations on the MRU will be holted. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 6 

GENESIS 
Trip: 80-LIT-005 LL 
System No. / Name: Fuel Gas System 
P&ID No: 12305 


Role of protection function: |Prevent gas blow by from HP Fuel Gas KO drum to the closed drains drum. 


Hazard Assessment Process: 
SIL MEETING 
Events leading to the hazard 


7 
Level control failure 


Consequence: Loss of gas to the cold vent. No risk to personnel, enviromental impact and cost of the lost gas. 
With no protection. 


Functional requirements necessary te Isolate the liquid outlet from the HP fuel gas KO drum. 
prevent hazard: 

Process condition detected by 80-LIT-005 

LL 80-LIT-005 LL, 80-LIC-006 L 

Final actuation device(s) necessary to 

prevent hazard: Close ESDV-005 

Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences ER LR — 

Exposure Time Ror a 

Avoidance Probability (P or NU) Ct 

Demand Rate (H, L or Wy) EE EE EE Ed 
ds a 

Other Protection Systems: EE EE EE EE 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Normally no liquid. If liquid carries over can damage the MRU bed and the fuel gas heater, compressors maytrip ifthe filters block wit 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 7 

GENESIS 
Trip: 80-LIT-005 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12305 


Role of protection function: |To prevent liquid carry over into the Mercury Removal Unit and downstream equipment. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of level control. Low 3 - 30 yrs 


= 


Consequence: Normally no liquid. If liquid carries over can damage the MRU bed and the fuel gas heater, compressors may trip if the filters block 
With no protection. with dust from the MRU. 


Functional requirements necessary te Isolate all the incoming streams to the HP fuel gas 

prevent hazard: 

Process condition detected by 80-LIT-005 

HH 80-LIT-005 HH, 80-LIC-006 H 

Final actuation device(s) necessary to j 
prevent hazard: ESDV-OO2AB, ESDV-003 AB, ESDV-004 AB, ESDV-010 AB, ESDV-028 AB will close. 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


SEE EE EE. TT 
posure Time (Tor EE DEE 
Avoidance Probability (P or NL) fo 
Demand Rate (AL, or) oT _ 
integrity Required ER 
E EE E EN 
ihe Protectan Saves eT 
sae EEN J ss 
EE — IE S 
Revised integrity required [ H O OE 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Short term outage for one shift when compressors trips. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 8 

GENESIS 
Trip: 80-PIT-004 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12305 


Role of protection function: |To prevent overpressure of HP fuel gas system 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Pressure control failure Low 3 - 30 yrs 


= 


Consequence: Potential to exceed to design pressure of HP fuel gas system, loss of containments leading to fire explosion, enviromental impact and 
With no protection. extended loss of production. 


Functional requirements necessary to Trip all incoming gas flows to HP fuel gas. 

prevent hazard: 

Process condition detected by 80-PIT-004 

HH 80-PIT-004 HH, 80-PIC-043 H 

Final actuation device(s) necessary to 7 
prevent hazard: ESDV-OO2AB, ESDV-003 AB, ESDV-004 A/B, ESDV-010 A/B, ESDV-028 AB will close. 
Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


GEES 
EE BEE 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
TE ac 
EE EECH EN 
EE 
EC 
EE — E 
Revised integrity required 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of fuel gas, compressors trip, short term losss of production for one shift. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 3 9 

GENESIS 
Trip: 80-PIT-004 LL 
System No. / Name: Fuel Gas System 
P&ID No: 12305 


Role of protection function: |To trip the compressors and power generators at low fuel gas pressure. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of pressure control Low 3 - 30 yrs 


= 


Consequence: Lose fuel gas to the compressors and generators causing an ESD 2 shut down. No risk to personnel and the enviroment. No major 
With no protection. commericial consequences because individual compressor and generator drives will trip on local low fuel gas pressure. 


rer Ee necessary te Isolate HP fuel gas to consumers. 

Process condition detected by 80-PIT-004 

LL 80-PIT-004 LL, 80-PIC-043 L 

Final actuation device(s) necessary to ` d 
prevent hazard: Compressor trip and generator change over to diesel. 
Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Exposure Time Ror FEE EE FEE EE 
Avoidance Probabiiiy (P or NUJ EE] 
Demand Rate (H, Lor Wi) ENER EES E 


Integrity Required EL 
Other Protection Systems: EN 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip No significant consequences. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 4 0 

GENESIS 
Trip: 80-TIT-007 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12302 


Role of protection function: |Prevent over heating of flash gas to HP fuel gas feed. 


Hazard Assessment Process: 


SIL MEETING 
Events leading to the hazard Event Frequency 
7 
Contacts on flash gas preheater fused. E Low 3 - 30 yrs 


Consequence: Potential to exceed design temperature of downstream piping leading to loss of containment, injury to personnel, enviromental impact 
With no protection. and cost of repair. No loss of production. 


ere necessary te Isolate the power to flash gas preheater. 
Process condition detected by 80-TIT-007 

HH 80-TIT-007 HH, 80-TDIC-008 H 

Final actuation device(s) necessary to 

prevent hazard: Power supply to heater. 

Functional requirements for orderly SS 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences SR ER — 

Exposure Tne (Wor) EE 

Avoidance Probability EH 

Demand Rate Lo) 
bëssen SC 

EE EE 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip No significant consequences. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 4 1 

GENESIS 
Trip: 80-TIT-005 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12302 


Role of protection function: |To protect the heater elements from over heating. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Failure of the temperature control Low 3-30 yrs 


Fused contacts. Low 3-30 yrs 


w 


Consequence: Potential burnout of the heater elements, loss of containment, local fire, risk of injury to personnel, minor impact to the enviroment and 
With no protection. cost to repair. Potential for fire to be confirmed causing ESD 1 shut down which includes automatic blow down. 


ere necessary te Isolate the power supply to the heater. 
Process condition detected by 80-TIT-005 

HH 80-TIT-005 HH, 80-TDIC-008 H 

Final actuation device(s) necessary to ‘ 

prevent hazard: Heater trip 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences Le MM] RR] 
Epos Time (Tor EE IE — 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
integrity Required ER 
E E E EN 
EE —————————— 
integiy reduction other INN NEE Js 
EE — IE 
Revised integrity required N N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip No significant consequence 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 
GENESIS 


Qasr Compression Project FEED 


Qasr SIL Assessment 


Worksheet Number: 


rip: 80-FI-XXX LL 


System No. / Name: Fuel Gas System 
P&ID No: 12302 


Role of protection function: |Prevent over heating of flash gas to HP fuel gas feed. 


Hazard Assessment Process: 


Si: MEETING Team: [See Attendance List 
Date: ` Däi 0/2011 
vents leading Wo the hazara 


Failure of the flow control L Low 3 - 30 yrs 


With no protection. land cost of repair. No loss of production. 


Process condition detected by 80-FI-X¥X 
I80-FI-XXX LL 


unctional requirements necessary to 
prevent hazard: Isolate the power to flash gas preheater. 


LL 
inal actuation device(s) necessary to 
prevent hazard: Power supply to heater. 
unctional requirements for orderly m 
Shutdown and start-up: None Specified 


Method of Determining required integrity levels 


onseguences 

xposure Time (R or 
Probability (P or N 
Rate (H, L, or V 


o| = 
oO 
ZS 
D 
al 5 
OO 
D 


Integrity Required 


OG 
S 


Protection Systems: 
ntegrity reduction (other protection 
ntegrity reduction (assumptions) 
Revised integrity required 


0 0 0 
Overall Teg Hoge ee EE KEET EE EE 
onsequences ot spurious 1rip No significant consequences. 


Ei 
o 
E 
3 
KR 
o 
5 
D 


| 


Recommendations 


Document No. 


Ranacie Nil 9 Race Canciultante l tA Dann 70 af QA Nata: Nlav ONA 4 


SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 4 3 

GENESIS 
Trip: 80-TIT-011 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12302 


Role of protection function: |To protect the piping downstream of the HP fuel gas preheater and the HP fuel gas KO drum from over heating 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Failure of temperature control Low 3-30 yrs 


Fused contacts. Low 3-30 yrs 


w 


Consequence: Exceed the design temperature of the downstream piping and the HP fuel gas KO drum. Loss of containment leading to fire explosion, 
With no protection. injury to personnel, enviromental impactand extended loss of production. 


ere necessary le Trip the HP fuel gas preheater. 
Process condition detected by 80-TIT-011 

HH 80-TIT-011 HH, 80-TDIC-012 H 
Final actuation device(s) necessary to F 

prevent hazard: Heater trip. 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences 

Exposure Tne (Wor) EE 

Avoidance Probability EH 

Demand Rate Lo) 
bëssen Et 

Ons Protection Systems: ess 


ENEE ER E 
integrity reducton (assumptions) I 
Revised integrity required ee OE 

Overall Integrity Required: 
Consequences of Spurious Trip Liquid dropout in the HP KOdrum, no loss of production. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 44 

GENESIS 
Trip: 80-TIT-009 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12302 


Role of protection function: |To protect the heater elements from over heating. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Failure of the temperature control Low 3-30 yrs 


Fused contacts Low 3-30 yrs 


w 


Consequence: Potential burnout of the heater elements, loss of containment, local fire, risk of injury to personnel, minor impact to the enviroment and 
With no protection. cost to repair. Potential for fire to be confirmed causing ESD 1 shut down which includes automatic blow down. 


Functional requirements necessary to Isolate power to the heater 
prevent hazard: 

Process condition detected by 80-TIT-009 

HH 80-TIT-009 HH, 80-TDIC-012 H 
Final actuation device(s) necessary to 3 

prevent hazard: Heater tip 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


ETE 

Exposure Tne (Wor) EE 

Avoidance Probability EH 

Demand Rate Lo) 
bëssen Et 

Ons Protection Systems: es 


ENEE ER E 
integrity reducton (assumptions) EE EE EET EE] 
Revised integrity required ee OE 

Overall Integrity Required: 
Consequences of Spurious Trip Liquid dropout in the HP KOdrum, no loss of production. MRU may be damaged by saturated gas causing liquid condensation on the 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: A 5 

GENESIS 
Trip: 80-TIT-022A HH, 08-TIT-022B HH 
System No. / Name: Fuel Gas System 
P&ID No: 12307 


Role of protection function: |To trip the HP fuel gas heater and protect the HP and LP fuel gas systems from excessively high temperatures 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING (ag: | 
03/10/2011 
Events leading to the hazard Event Frequency 


7 


Temperature control failure Low 3-30 yrs 


Fused contacts Low 3-30 yrs 


w 


Consequence: Potential to exceed the design temperature of the HP and LP fuel gas systems leading to loss of containment with potential fatality, 
With no protection. enviromental impactand minimum of f sevral days loss of production. 


Functional requirements necessary to Isolate the power to the heater. 

prevent hazard: 

Process condition detected by 80-TIT- 

022A HH, 08-TIT-022B HH 80-TIT-022A HH, 80-TIT-022B HH, 80-TDIC-020A H 
Final actuation device(s) necessary to i 

prevent hazard: Heater trip 

Functional requirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


ETES 
Eene Tine ROA EE EE EE — 
Avoidance Probability (P or NL) 
Demand Fate (Lor 
integrity Required EL 
ECH EECH N 
EE Eg 
ne we 
mass Ek 
Revised integrity required Va OE 2 1 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of superheat in fuel gas supply to turbines, which may trip on low absolute temperature. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: A 6 

GENESIS 
Trip: 80-TIT-019A HH, 80-TIT-019B HH 
System No. / Name: Fuel Gas System 
P&ID No: 12307 


Role of protection function: |To cut the power supply in the event of thermal overload to the heater. 


Hazard Assessment Process: 
SIL MEETING 
Events leading to the hazard 


7 
Fused coontacts 


5 
Consequence: Potential burnout of the heater elements, loss of containment, local fire, risk of injury to personnel, minor impactto the enviroment and 
With no protection. cost to repair. Potential for fire to be confirmed causing ESD 1 shut down which includes automatic blow down. 


Functional requirements necessary to 
Isolate power to heaters. 
prevent hazard: 
Process condition detected by 80-TIT- 
019A HH, 80-TIT-019B HH 80-TIT-019A HH, 80-TIT-019B HH 
Final actuation device(s) necessary to ‘ 
prevent hazard: Heater trip 
Functional requirements for orderly ss 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


ETES 
Eene Tine ROA EE SE EE — 
Avoidance Probability (P or NL) 
Demand Fate (Lor 
integrity Required EL 
E EECH N, 
EE Eg 
ne we 
mees Ek 
Revised integrity required N N 2 1 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of superheat in fuel gas supply to turbines, which may trip on low absolute temperature. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 4 DH 

GENESIS 
Trip: 80-TDI-XXX LL 
System No. / Name: Fuel Gas System 
P&ID No: 12307 


Role of protection function: |To protect the gas turbines from non superheated gas 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
T 


Temperature control failure. Low 3 - 30 yrs 


= 


Consequence: Turbines will see non superheated gas and potential mechanical damage. Extended loss of production 
With no protection. 


Functional requirements necessary to Trip the turbines 
prevent hazard: 
Process condition detected by 80-TDI- 
80-TDI-XXX LL, 80-TDIC-020AB L 
XXX LL 
Final actuation device(s) necessary to R ` 
prevent hazard: Turbine trips 
Functional requirements for orderly SS 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences EN — ë O o O 

Exposure Time Ror a 

Avoidance Probability (P or NU) Ct 

Demand Rate (H, L or Wy) EE EE GENEE 
Ee 

Other Protection Systems: EE EE EE EE 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Short term loss of production 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 4 8 

GENESIS 
Trip: 80-LIT-008 LL 
System No. / Name: Fuel Gas System 
P&ID No: 12308 


Role of protection function: |Prevent gas blow by from LP Fuel Gas KO drum to the closed drains drum 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of level control Low 3 - 30 yrs 


w 


Consequence: Loss of LP fuel gas to cold vent. No risk to personnel, minor enviromental impact and cost of the lost gas. 
With no protection. 


rer Ee necessaty 10 Isolate the liquid outlet from the LP fuel gas KO drum. 
Process condition detected by 80-LIT-008 

LL 80-LIT-008 LL, 80-LIC-009 L 

Final actuation device(s) necessary to 

prevent hazard: ESDV-006 

Functional requirements for orderly ss 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences er 
posure Time (Tor oo, 
Avoidance Probability (P or NL) fo 
Demand Rate (iL or) EER 
integrity Required ER 
E EE N 
ihe Protectan Stems eT 
sae EEN Js 
ER — IE S 
Revised integrity required N N 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Normally no liquid, but if liquid carries over, will extinguish the flare gas pilots. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 


Document No. Sheet Revision: 


Genesis Oil & Gas Consultants Ltd Page 76 of 84 Date: Nov 2011 
File name: J08509A-F-RT-20055 Rev D2 SIL Assessment Report Rev: D2 


SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 4 9 

GENESIS 
Trip: 80-PIT-053 LL 
System No. / Name: Fuel Gas System 
P&ID No: 12308 


Role of protection function: |To open the back-up fuel gas supply to essential users (flare pilots and purges) ifthe LP fuel gas supplyis lost. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Tee: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 
Loss of gas from the HP fuel gas supply. E Low 3 - 30 yrs 


Consequence: Loss of LP fuel gas to consumers which include purges to the flares and vents, pilot gas supply. 
With no protection. 


Functional requirements necessary to 

prevent hazard: Open the back-up fuel gas supply. 
Process condition detected by 80-PIT-053 

LL 80-PIT-053 LL, 80-PIC-054 L 
Final actuation device(s) necessary to 

prevent hazard: Opens ESDV-025 A 

Functional requirements for orderly 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


ConsequeTces VEER “Re (CE 

Exposure Tmo RH EE 

Avoidance Probability EH II 

Demand Rate Dt or) EE EER EE 
EE SC 

EE EE 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip No significant consequences 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 5 0 

GENESIS 
Trip: 80-PIT-053 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12308 


Role of protection function: |To protect the LP fuel gas knock out drum. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of pressure control Low 3 - 30 yrs 


= 


Consequence: Over pressure of the LP fuel gas KO drum leading to loss of containments, potential fatality enviromental impact and extended shut 
With no protection. down until damage is repaired. 


Functional requirements necessary to Isolated the HP fuel gas letdown. 
prevent hazard: 

Process condition detected by 80-PIT-053 

HH 80-PIT-053 HH, 80-PIC-054 H 
Final actuation device(s) necessary to 

prevent hazard: ESDV-007 

Functional requirements for orderly SS 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


EE 
Epos Time (Tor EE EE 
Avoidance Probability (P or NL) 
Demand Rate (HL, RI 
TE ac 

EE EE Ke Ee EE 
EE 
EC 
EE EE 
Revised integrity required [ H OE 0 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip No significant consequences because back up supply will make up for short fall 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 5 1 

GENESIS 
Trip: 80-LIT-008 HH 
System No. / Name: Fuel Gas System 
P&ID No: 12308 


Role of protection function: |To prevent liquid carry into the LP fuel gas distribution system. 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 


Failure of the level control L Low 3 - 30 yrs 


Consequence: Liquid in the LP fuel gas distribution system will extinguish the flare pilots. 
With no protection. 


Functional requirements necessary to ESD 2 shutdown 

prevent hazard: 

Process condition detected by 80-LIT-008 

HH 80-LIT-008 HH, 80-LIC-009 H 
Final actuation device(s) necessary to 

prevent hazard: ESD 2 shutdown 

Functional requirements for orderly Se 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences EE IT LS 
posure Time (Tor EE DEE 
Avoidance Probability (P or NL) fo 
Demand Rate (AL, or) EE 
integrity Required ER 
E EE E EN 
ihe Protectan Saves eT 
sae EEN Js 
EE — IE S 
Revised integrity required [ N 1 0 


Overall Integrity Reguired: 
Consequences of Spurious Trip Loss of production for a shift. 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED — 
g Oasr SIL Assessment 
Worksheet Number: 5 2 

GENESIS 
Trip: 65-LIT-002 LL 
System No. / Name: Closed Drain System 
P&ID No: 12311/12314 


Role of protection function: |Protect closed drains drum pump 


Hazard Assessment Process: 


Team See Attendance List 
SIL MEETING Team: | 
03/10/2011 


Events leading to the hazard Event Frequency 
7 
Closed drain pump fails to stop and closed drain transfer pump fails to stop. E Low 3 - 30 yrs 


Consequence: Potential to damage the pumps, loss of containment, injury to personnel. No loss of production. 
With no protection. 


Functional requirements necessary te Trip the drain drum and drains transfer pump 
prevent hazard: 

Process condition detected by 65-LIT-002 

LL 65-LIT-002 LL, 80-PIC-012 L 

Final actuation device(s) necessary to j 

prevent hazard: Pump tips 

Functional reguirements for orderly = 

shutdown and start-up: None Specified 


Method of Determining required integrity levels 


Consequences SEKR I 

Exposure ime Ror RE 

Avoidance Probability (P or NL) 

Demand Rate (H, L or Wy) EE EE EE SE GENEE 
Ee 

Other Protection Systems: EE ET EE 


Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip 
Assumptions: 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED E 
Oasr GIL Assessment 
Worksheet Number: 5 3 

GENESIS 
Trip: 65-LIT-002 HH 
System No. / Name: Closed Drain System 
P&ID No: 12305 


Role of protection function: |To prevent the closed drains drum overflowing into the cold vent and notto allow the plant to operate when the closed drain drum is full 


Hazard Assessment Process: 


See Attendance List 
SIL MEETING 
Date 03/10/2011 


Events leading to the hazard Event Frequency 


7 


Drum or transfer pump fails to start. Low 3 - 30 yrs 


re 


Consequence: Over flow into the cold vent system, potential to discharge hydrocarbon from vent. Enviromental impact, loss of production for one shift 
With no protection. to remedy the situation. 


Functional requirements necessary to 
prevent hazard: 


Process condition detected by 65-LIT-002 
HH 65-LIT-002 HH, 80-LIC-012 H 


ESD 2 shutdown 


Final actuation device(s) necessary to 


prevent hazard: ESD 2 shutdown 


Functional requirements for orderly ` 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


esus Time AoA ER EE — 
Avoidance Probability (P or NL) 
Demand Fate or) 


Other Protection Systems: 

Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip ESD 2 shutdown, causing one shift loss of production. 
Assumptions: 


| | 
| 
| 


1 


4 


N 


Recommendations 


4 


N 
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SIL Assessment Report 


GENESIS 
Qasr Compression Project FEED sa 
Oasr SIL Assessment 
Worksheet Number: 54 

GENESIS 
Trip: 30-LIT-344 HH 
System No. / Name: Flare 
P&ID No: 12356 


Role of protection function: |To shutthe plant down ifthe is high level in the flare KO drum. 


Hazard Assessment Process: 
Team See Attendance List 
SIL MEETING (Ges: | 


03/10/2011 


m 


Events leading to the hazard vent Frequency 


Large liquid discharges to existing flare from existnig facilities or compression facilities. 


Low 3 - 30 yrs 


Inability to evacutate liquid from existing flare drum. Low 3 - 30 yrs 


w 


Consequence: High back pressure from the flare system and golden rain from the flare. Extended shutdown to clear the problem. Potential for 
With no protection. multiple deaths. 


Functional requirements necessary to 
prevent hazard: 


Process condition detected by 30-LIT-344 
HH 30-LIT-344 HH, 30-LI-344 H 


ESD 2 shutdown 


Final actuation device(s) necessary to 


prevent hazard: ESD 2 shutdown 


Functional requirements for orderly ` 
shutdown and start-up: None Specified 


Method of Determining required integrity levels 


enr Time arr) EE A 
Avoidance Probability (P or NL) 
Demand Fae For) 


Other Protection Systems: 

Integrity reduction (other protection) 
Integrity reduction (assumptions) 
Revised integrity required 

Overall Integrity Required: 
Consequences of Spurious Trip Loss ofa shifts production to recover. 
Assumptions: 


| 
| 


1 


4 


N 


Recommendations 


4 


N 
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GENESIS 
Qasr Compression Project FEED mem 
APPENDIX B - HAZOP MASTER P&IDS 
Appendix B Hazop 
Marked Up P&l Ds. pdf 
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GENESIS 
Qasr Compression Project FEED — 
APPENDIX C — MASTER ESD CAUSE & EFFECTS DIAGRAM 
J 08509A-P-DW-1240 
0 Rev C1 ESD Cause 
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